Resource management error in Linux kernel - CVE-2024-26630

Vulnerability identifier: #VU93781

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-26630

CWE-ID: CWE-399

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the filemap_cachestat() function in mm/filemap.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for ARM 64
IBM DataPower Gateway
Red Hat OpenShift Container Platform
Juniper Junos Space
OpenShift Logging
kernel (Red Hat package)

Install update from vendor's website.

Linux kernel - addressed in versions 6.6.21, 6.7.9, 6.8
IBM DataPower Gateway - update to 10.6.4.0
Juniper Junos Space - update to 24.1R2
Red Hat OpenShift Container Platform - update to 4.17.0
OpenShift Logging - update to 5.8.13
kernel (Red Hat package) - update to 5.14.0-427.35.1.el9_4

• https://git.kernel.org/stable/c/ba60fdf75e89ea762bb617be578dc47f27655117
• https://git.kernel.org/stable/c/fe7e008e0ce728252e4ec652cceebcc62211657c
• https://git.kernel.org/stable/c/3a75cb05d53f4a6823a32deb078de1366954a804
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.21
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.9
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8

• Resource management error in Linux kernel mm
• Red Hat Enterprise Linux 9 update for kernel
• Multiple vulnerabilities in OpenShift Logging 5.8
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in Junos Space
• Multiple vulnerabilities in IBM DataPower Gateway