cve 2024 45000

CVE-2024-45000 is a Linux kernel vulnerability in the fscache subsystem that can cause a denial-of-service (DoS) condition. The flaw involves a race condition where a NULL pointer dereference occurs during an LRU-discard transition in the fscache state machine, specifically due to a missing check of the cookie access counter. This can crash the kernel, affecting system availability. The vulnerability does not lead to data disclosure or privilege escalation. Systems using fscache, often with network filesystems like NFS, are at risk. The upstream fix adds a check to prevent cookie withdrawal while active accesses remain. This tag covers discussions and explanations of CVE-2024-45000, its impact, and mitigation steps.