CVE-2024-0443

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Jan 11, 2024
Source updated: Jul 21, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

kernel

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: unaffected
Package: kernel
Package collection: https://git.kernel.org/pub/scm/linux/kernel

kernel · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	6.4-rc7	Unavailable	None listed

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: affected
Package: kernel
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:4.18.0-513.5.1.el8_9	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.2 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.2 Extended Update Support
Platforms: Unknown
Default status: affected
Package: kernel
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.2 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:5.14.0-284.40.1.el9_2	`unaffected`	rpm	*	Unavailable	None listed