CVE-2024-26993 - CVE House
Back to Database
Status published Unknown CVE-2024-26993

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: fs: sysfs: Fix reference leak in sysfs_break_active_protection() The sysfs_break_active_protection() routine has an obvious reference leak in its error path. If the call to kernfs_find_and_get() fails then kn will be NULL, so the companion sysfs_unbreak_active_protection() routine won't get called (and would only cause an access violation by trying to dereference kn->parent if it was called). As a result, the reference to kobj acquired at the start of the function will never be released. Fix the leak by adding an explicit kobject_put() call when kn is NULL.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-26993

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
2afc9166f79b8f6da5f347f48515215ceee4ae37, e8a37b2fd5b5087bec6cbbf6946ee3caa712953b, a6abc93760dd07fcd29760b70e6e7520f22cb288, 461a6385e58e8247e6ba2005aa5d1b8d980ee4a2, 8a5e02a0f46ea33ed19e48e096a8e8d28e73d10a, c984f4d1d40a2f349503b3faf946502ccbf02f9f, 807d1d299a04e9ad9a9dac55419c1137a105254b, 3.16.62, 3.18.121, 4.4.154, 4.9.125, 4.14.68, 4.18.6, 4.19, 0, 4.19.313, 5.4.275, 5.10.216, 5.15.157, 6.1.88, 6.6.29, 6.8.8, 6.9

Timeline

Official Publish: May 1st, 2024
Last Modified: May 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.