CVE-2024-41075

A flaw was found in the Linux kernel's cachefiles subsystem. Missing consistency checks allow a local attacker to complete mismatched or invalid on-demand open and read requests. This issue can trigger a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Low impact because exploitation is constrained to a local denial of service through a kernel crash, without compromising system confidentiality or integrity. In supported Red Hat Enterprise Linux releases, the on-demand cachefiles feature is not present, limiting exposure to environments running modern community kernels where this capability is active. Additionally, triggering the condition requires local unprivileged access and interaction with the user-space cache daemon interface, precluding any remote attack vector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.