CVE-2024-50065

MEDIUM

Linux Kernel - Denial of Service via Blocking Allocation in ntfs3 d_hash

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Change to non-blocking allocation in ntfs_d_hash d_hash is done while under "rcu-walk" and should not sleep. __get_name() allocates using GFP_KERNEL, having the possibility to sleep when under memory pressure. Change the allocation to GFP_NOWAIT.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/c556e72cea2a1131ae418be017dd6fc76fffe2fb

Patch

https://git.kernel.org/stable/c/d0c710372e238510db08ea01e7b8bd81ed995dd6

Patch

https://git.kernel.org/stable/c/589996bf8c459deb5bbc9747d8f1c51658608103

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 12.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (15)

linux/Kernel < 6.6.57linux

linux/Kernel 6.7.0 - 6.11.4linux

Linux/Linux < 6.11

Linux/Linux 2e83375fd95b81be0e9ca457cc7c3f23e3575768

Linux/Linux 58ebd50d22529f79d2497abbb006137a7c7f5336 - c556e72cea2a1131ae418be017dd6fc76fffe2fb

Linux/Linux 6.10.3 - 6.11

Linux/Linux 6.11

Linux/Linux 6.11.4 - 6.11.*

Linux/Linux 6.12

Linux/Linux 6.6.44 - 6.6.57

... and 5 more

Published Oct 21, 2024

Tracked Since Feb 18, 2026