CVE-2024-27389

In the Linux kernel, the following vulnerability has been resolved:

pstore: inode: Only d_invalidate() is needed

The Linux kernel CVE team has assigned CVE-2024-27389 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024050135-CVE-2024-27389-fb3a@gregkh/T

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires root privileges to unload kernel modules. The underlying reference count issue in the pstore filesystem is encountered only when removing a modular backend driver while persistent storage records remain active. Because unprivileged local users and remote attackers cannot initiate module removal, this flaw poses minimal risk to standard deployments and does not result in unauthorized privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.