Medium
Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
Type: advisorySources: Official CVE List
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.
- Products
- Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Extended Update Support
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-0443
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 17:04 UTC · Revision 1
Source evidence
Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
core-cve · Original sourcePublished 11 Jan 2024, 23:30 UTC
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.
cve:CVE-2024-0443
Red Hat Enterprise Linux 8
Fixed versions: Not specified
Red Hat Enterprise Linux 9.2 Extended Update Support
Fixed versions: Not specified
Red Hat Enterprise Linux 6
Fixed versions: Not specified
Red Hat Enterprise Linux 7
Fixed versions: Not specified
Red Hat Enterprise Linux 7
Fixed versions: Not specified
Red Hat Enterprise Linux 8
Fixed versions: Not specified
Red Hat Enterprise Linux 9
Fixed versions: Not specified
Red Hat Enterprise Linux 9
Fixed versions: Not specified
Complete source record
{
"id": "a1855bbbcd4c20cf7da03e7b5cc9b5e49073e070841e1dfd3741a6c9e255d739",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-0443",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.",
"summary": "A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.",
"evidence": "cve:CVE-2024-0443",
"products": [
{
"name": {
"value": "Red Hat Enterprise Linux 8",
"evidence": "/containers/cna/affected/1/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9.2 Extended Update Support",
"evidence": "/containers/cna/affected/2/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 6",
"evidence": "/containers/cna/affected/3/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 7",
"evidence": "/containers/cna/affected/4/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 7",
"evidence": "/containers/cna/affected/5/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8",
"evidence": "/containers/cna/affected/6/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9",
"evidence": "/containers/cna/affected/7/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9",
"evidence": "/containers/cna/affected/8/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "CVE-2024-0443",
"aliases": [
"CVE-2024-0443"
],
"metrics": [
{
"other": {
"type": "Red Hat severity rating",
"content": {
"value": "Moderate",
"namespace": "https://access.redhat.com/security/updates/classification/"
}
}
},
{
"format": "CVSS",
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
}
}
],
"affected": [
{
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "6.4-rc7",
"versionType": "semver"
}
],
"packageName": "kernel",
"collectionURL": "https://git.kernel.org/pub/scm/linux/kernel",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::crb",
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:4.18.0-513.5.1.el8_9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.2::appstream",
"cpe:/a:redhat:rhel_eus:9.2::crb",
"cpe:/o:redhat:rhel_eus:9.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:5.14.0-284.40.1.el9_2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7",
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"packageName": "kernel",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"packageName": "kernel-rt",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "unaffected"
}
],
"modified": "2026-10-26T17:59:11.410Z",
"provider": "cve",
"references": [
"https://access.redhat.com/errata/RHSA-2023:6583",
"https://access.redhat.com/errata/RHSA-2023:7077",
"https://access.redhat.com/errata/RHSA-2023:7370",
"https://access.redhat.com/security/cve/CVE-2024-0443",
"https://bugzilla.redhat.com/show_bug.cgi?id=2257968",
"https://lore.kernel.org/linux-block/20221215033132.230023-3-longman@redhat.com/"
],
"provider_metadata": {
"adp": [
{
"title": "CVE Program Container",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2023:6583",
"name": "RHSA-2023:6583",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2023:7077",
"name": "RHSA-2023:7077",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2023:7370",
"name": "RHSA-2023:7370",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://access.redhat.com/security/cve/CVE-2024-0443",
"tags": [
"vdb-entry",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2257968",
"name": "RHBZ#2257968",
"tags": [
"issue-tracking",
"x_refsource_REDHAT",
"x_transferred"
]
},
{
"url": "https://lore.kernel.org/linux-block/20221215033132.230023-3-longman@redhat.com/",
"tags": [
"x_transferred"
]
}
],
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-01T18:04:49.703Z"
}
},
{
"title": "CISA ADP Vulnrichment",
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2024-0443",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-05-08T15:55:26.093819Z"
}
}
}
],
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-06-03T14:07:10.103Z"
}
}
],
"cna": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-10-26T17:59:11.410Z"
}
}
},
"related_cves": [
{
"value": "CVE-2024-0443",
"evidence": "/cveMetadata/cveId"
}
],
"security_relevant": true,
"severity_evidence": "/containers/cna/metrics"
},
"source_id": "core-cve",
"document_id": 329089,
"published_at": "2024-01-11T23:30:52.291+00:00"
}