CVE-2024-56749

low-risk
Published 2024-12-29

In the Linux kernel, the following vulnerability has been resolved: dlm: fix dlm_recover_members refcount on error If dlm_recover_members() fails we don't drop the references of the previous created root_list that holds and keep all rsbs alive during the recovery. It might be not an unlikely event because ping_members() could run into an -EINTR if another recovery progress was triggered again.

Do I need to act?

-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (3)

Patch https://git.kernel.org/stable/c/200b977ebbc313a59174ba971006a231b3533dc5
Patch https://git.kernel.org/stable/c/3230718a75a6c30ed60ac920c26be2119fa82b8e
Patch https://git.kernel.org/stable/c/fb2ec564887af1f365d754f7c306f1b5cd375b5e
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal