CVE-2024-56630

ocfs2: free inode when ocfs2_get_init_inode() fails

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2_get_init_inode() fails syzbot is reporting busy inodes after unmount, for commit 9c89fe0af826 ("ocfs2: Handle error from dquot_initialize()") forgot to call iput() when new_inode() succeeded and dquot_initialize() failed.

N/A

CVSS

Severity:

EPSS 0.07%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/911fcc95b530615b484e8920741fc5e4bc4e684a
https://git.kernel.org/stable/c/9c19ea59965ebb482e227532f7bbb01792fb028c
https://git.kernel.org/stable/c/c5327720a4655303ffa3f632d86ee205dd783f32
https://git.kernel.org/stable/c/67c2c6d0564ca05348ba4f8f6eaf7a0713f56c15
https://git.kernel.org/stable/c/a84d507d3290aca249b44ae992af9e10590cc5f6
https://git.kernel.org/stable/c/03db61c43c8e2729896fda6b9a95c7fb5c875c20
https://git.kernel.org/stable/c/965b5dd1894f4525f38c1b5f99b0106a07dbb5db

Frequently Asked Questions

What is the severity of CVE-2024-56630?: CVE-2024-56630 has not yet been assigned a CVSS score.
How to fix CVE-2024-56630?: To fix CVE-2024-56630, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2024-56630 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-56630 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-56630?: CVE-2024-56630 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.