5.5

CVE-2024-41001: io_uring/sqpoll: work around a potential audit memory leak

Modified
AliasesUBUNTU-CVE-2024-41001DEBIAN-CVE-2024-41001
Published 12-07-2024Last modified 11-05-2026

Vulnerability summary

CVE-2024-41001 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 19.3% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.27%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 12
DLA-4008-1DSA-5731-1RHSA-2024:9315SUSE-SU-2024:3194-1SUSE-SU-2024:3195-1SUSE-SU-2024:3383-1

Timeline

  1. 12-07-2024
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: work around a potential audit memory leak kmemleak complains that there's a memory leak related to connect handling: unreferenced object 0xffff0001093bdf00 (size 128): comm "iou-sqp-455", pid 457, jiffies 4294894164 hex dump (first 32 bytes): 02 00 fa ea 7f 00 00 01 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2e481b1a): [<00000000c0a26af4>] kmemleak_alloc+0x30/0x38 [<000000009c30bb45>] kmalloc_trace+0x228/0x358 [<000000009da9d39f>] __audit_sockaddr+0xd0/0x138 [<0000000089a93e34>] move_addr_to_kernel+0x1a0/0x1f8 [<000000000b4e80e6>] io_connect_prep+0x1ec/0x2d4 [<00000000abfbcd99>] io_submit_sqes+0x588/0x1e48 [<00000000e7c25e07>] io_sq_thread+0x8a4/0x10e4 [<00000000d999b491>] ret_from_fork+0x10/0x20 which can can happen if: 1) The command type does something on the prep side that triggers an audit call. 2) The thread hasn't done any operations before this that triggered an audit call inside ->issue(), where we have audit_uring_entry() and audit_uring_exit(). Work around this by issuing a blanket NOP operation before the SQPOLL does anything.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.27%

Chance of exploitation in the next 30 days

Percentile

19%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.27% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu125 products
  • linuxAll versions (No fix recorded) | < 6.8.0-44.44
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1015.16
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 2b188cc1bb857a9d4701ae59aa7768b5124e262e, < 55c22375cbaa24f77dd13f9ae0642915444a1227 | ≥ 2b188cc1bb857a9d4701ae59aa7768b5124e262e, < 9e810bd995823786ea30543e480e8a573e5e5667 | ≥ 2b188cc1bb857a9d4701ae59aa7768b5124e262e, < a40e90d9304629002fb17200f7779823a81191d3 | ≥ 2b188cc1bb857a9d4701ae59aa7768b5124e262e, < c4ce0ab27646f4206a9eb502d6fe45cb080e1cae | 5.1
  • linux_kernel< 6.1.96 | ≥ 6.2, < 6.6.36 | ≥ 6.7, < 6.9.7
Debian1 product
  • linux< 6.1.99-1 | < 6.9.7-1

3 vendors · 128 products

References

17 links
Show all 17 references