Linux Kernel Vulnerability in DLM Component

CVE-2024-56749

Summary

A vulnerability in the Linux kernel's Distributed Lock Manager (DLM) component has been identified, which can occur during the member recovery process. Specifically, if the dlm_recover_members() function encounters an error, it fails to release references held by the root_list structure that is critical for maintaining resource state blocks (rsbs) during recovery. This can lead to resource retention issues, particularly in scenarios where ping_members() may be interrupted, causing an erroneous state that could affect overall kernel stability and performance. Ensuring timely updates and patches for affected kernel versions is essential to mitigate these concerns.

References