CVE-2024-56630

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56630
In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2_get_init_inode() fails syzbot is reporting busy inodes after unmount, for commit 9c89fe0af826 ("ocfs2: Handle error from dquot_initialize()") forgot to call iput() when new_inode() succeeded and dquot_initialize() failed.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/03db61c43c8e2729896fda6b9a95c7fb5c875c20 Patch
https://git.kernel.org/stable/c/67c2c6d0564ca05348ba4f8f6eaf7a0713f56c15 Patch
https://git.kernel.org/stable/c/911fcc95b530615b484e8920741fc5e4bc4e684a Patch
https://git.kernel.org/stable/c/965b5dd1894f4525f38c1b5f99b0106a07dbb5db Patch
https://git.kernel.org/stable/c/9c19ea59965ebb482e227532f7bbb01792fb028c Patch
https://git.kernel.org/stable/c/a84d507d3290aca249b44ae992af9e10590cc5f6 Patch
https://git.kernel.org/stable/c/c5327720a4655303ffa3f632d86ee205dd783f32 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
History

26 Sep 2025, 16:48

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/03db61c43c8e2729896fda6b9a95c7fb5c875c20 - () https://git.kernel.org/stable/c/03db61c43c8e2729896fda6b9a95c7fb5c875c20 - Patch
References () https://git.kernel.org/stable/c/67c2c6d0564ca05348ba4f8f6eaf7a0713f56c15 - () https://git.kernel.org/stable/c/67c2c6d0564ca05348ba4f8f6eaf7a0713f56c15 - Patch
References () https://git.kernel.org/stable/c/911fcc95b530615b484e8920741fc5e4bc4e684a - () https://git.kernel.org/stable/c/911fcc95b530615b484e8920741fc5e4bc4e684a - Patch
References () https://git.kernel.org/stable/c/965b5dd1894f4525f38c1b5f99b0106a07dbb5db - () https://git.kernel.org/stable/c/965b5dd1894f4525f38c1b5f99b0106a07dbb5db - Patch
References () https://git.kernel.org/stable/c/9c19ea59965ebb482e227532f7bbb01792fb028c - () https://git.kernel.org/stable/c/9c19ea59965ebb482e227532f7bbb01792fb028c - Patch
References () https://git.kernel.org/stable/c/a84d507d3290aca249b44ae992af9e10590cc5f6 - () https://git.kernel.org/stable/c/a84d507d3290aca249b44ae992af9e10590cc5f6 - Patch
References () https://git.kernel.org/stable/c/c5327720a4655303ffa3f632d86ee205dd783f32 - () https://git.kernel.org/stable/c/c5327720a4655303ffa3f632d86ee205dd783f32 - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-908
First Time Linux
Linux linux Kernel
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: inodo libre cuando ocfs2_get_init_inode() falla syzbot informa inodos ocupados después del desmontaje, para el commit 9c89fe0af826 ("ocfs2: Error de gestión de dquot_initialize()") olvidó llamar a iput() cuando new_inode() tuvo éxito y dquot_initialize() falló.

27 Dec 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-27 15:15

Updated : 2025-09-26 16:48

NVD link : CVE-2024-56630

Mitre link : CVE-2024-56630

CVE.ORG link : CVE-2024-56630

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-908

Use of Uninitialized Resource