CVE-2024-26840

cachefiles: fix memory leak in cachefiles_add_cache()

State: Published
Severity: Not scored
Published: Apr 17, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

cachefiles: fix memory leak in cachefiles_add_cache()

The following memory leak was reported after unbinding /dev/cachefiles:

================================================================== unreferenced object 0xffff9b674176e3c0 (size 192): comm "cachefilesd2", pid 680, jiffies 4294881224 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc ea38a44b): [<ffffffff8eb8a1a5>] kmem_cache_alloc+0x2d5/0x370 [<ffffffff8e917f86>] prepare_creds+0x26/0x2e0 [<ffffffffc002eeef>] cachefiles_determine_cache_security+0x1f/0x120 [<ffffffffc00243ec>] cachefiles_add_cache+0x13c/0x3a0 [<ffffffffc0025216>] cachefiles_daemon_write+0x146/0x1c0 [<ffffffff8ebc4a3b>] vfs_write+0xcb/0x520 [<ffffffff8ebc5069>] ksys_write+0x69/0xf0 [<ffffffff8f6d4662>] do_syscall_64+0x72/0x140 [<ffffffff8f8000aa>] entry_SYSCALL_64_after_hwframe+0x6e/0x76 ==================================================================

Put the reference count of cache_cred in cachefiles_daemon_unbind() to fix the problem. And also put cache_cred in cachefiles_add_cache() error branch to avoid memory leaks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9ae326a69004dea8af2dae4fde58de27db700a8d to before cb5466783793e66272624cf71925ae1d1ba32083Affected 9ae326a69004dea8af2dae4fde58de27db700a8d to before 037d5a949b0455540ef9aab34c10ddf54b65d285Affected 9ae326a69004dea8af2dae4fde58de27db700a8d to before 43eccc5823732ba6daab2511ed32dfc545a666d8Affected 9ae326a69004dea8af2dae4fde58de27db700a8d to before 94965be37add0983672e48ecb33cdbda92b62579Affected 9ae326a69004dea8af2dae4fde58de27db700a8d to before 8b218e2f0a27a9f09428b1847b4580640b9d1e58Affected 9ae326a69004dea8af2dae4fde58de27db700a8d to before 38e921616320d159336b0ffadb09e9fb4945c7c3Affected 9ae326a69004dea8af2dae4fde58de27db700a8d to before 9cac69912052a4def571fedf1cb9bb4ec590e25aAffected 9ae326a69004dea8af2dae4fde58de27db700a8d to before e21a2f17566cbd64926fb8f16323972f7a064444Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.19.309 through 4.19.Not affected 5.4.271 through 5.4.Not affected 5.10.212 through 5.10.Not affected 5.15.151 through 5.15.Not affected 6.1.80 through 6.1.Not affected 6.6.19 through 6.6.Not affected 6.7.7 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

9ae326a69004dea8af2dae4fde58de27db700a8d to before cb5466783793e66272624cf71925ae1d1ba32083Affected
9ae326a69004dea8af2dae4fde58de27db700a8d to before 037d5a949b0455540ef9aab34c10ddf54b65d285Affected
9ae326a69004dea8af2dae4fde58de27db700a8d to before 43eccc5823732ba6daab2511ed32dfc545a666d8Affected
9ae326a69004dea8af2dae4fde58de27db700a8d to before 94965be37add0983672e48ecb33cdbda92b62579Affected
9ae326a69004dea8af2dae4fde58de27db700a8d to before 8b218e2f0a27a9f09428b1847b4580640b9d1e58Affected
9ae326a69004dea8af2dae4fde58de27db700a8d to before 38e921616320d159336b0ffadb09e9fb4945c7c3Affected
9ae326a69004dea8af2dae4fde58de27db700a8d to before 9cac69912052a4def571fedf1cb9bb4ec590e25aAffected
9ae326a69004dea8af2dae4fde58de27db700a8d to before e21a2f17566cbd64926fb8f16323972f7a064444Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.19.309 through 4.19.*Not affected
5.4.271 through 5.4.*Not affected
5.10.212 through 5.10.*Not affected
5.15.151 through 5.15.*Not affected
6.1.80 through 6.1.*Not affected
6.6.19 through 6.6.*Not affected
6.7.7 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.