CVE-2024-56749

In the Linux kernel, the following vulnerability has been resolved:

dlm: fix dlm_recover_members refcount on error

If dlm_recover_members() fails we don't drop the references of the previous created root_list that holds and keep all rsbs alive during the recovery. It might be not an unlikely event because ping_members() could run into an -EINTR if another recovery progress was triggered again.

This vulnerability is rated as Moderate because exploitation is limited to a denial of service through memory exhaustion and requires the Distributed Lock Manager (DLM) subsystem to be active. DLM is not loaded or configured by default on Red Hat Enterprise Linux and is primarily deployed in specialized high-availability clustering environments. Furthermore, triggering the reference count leak requires recovery failure conditions, such as interrupted member recovery cycles, significantly reducing exposure in standard operational setups.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.