Linux Kernel xattr fdput() leak causes kernel exhaustion
CVE-2024-14027 Published on March 9, 2026
xattr: switch to CLASS(fd)
In the Linux kernel, the following vulnerability has been resolved:
fs/xattr: missing fdput() in fremovexattr error path
In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a
file reference but returns early without calling fdput() when
strncpy_from_user() fails on the name argument. In multi-threaded processes
where fdget() takes the slow path, this permanently leaks one
file reference per call, pinning the struct file and associated kernel
objects in memory. An unprivileged local user can exploit this to cause
kernel memory exhaustion. The issue was inadvertently fixed by commit
a71874379ec8 ("xattr: switch to CLASS(fd)").
Products Associated with CVE-2024-14027
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version c3a5e3e872f3688ae0dc57bb78ca633921d96a91 and below a71874379ec8c6e788a61d71b3ad014a8d9a5c08 is affected.
- Version c03185f4a23e7f89d84c9981091770e876e64480 is affected.
- Version 8d5863cb33aa424fc27115ee945ad6b96ae2facb is affected.
- Version 6.11 is affected.
- Before 6.11 is unaffected.
- Version 6.13, <= * is unaffected.