---
id: CVE-2024-0443
title: >-
  A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the
  Linux kernel, leading to a cgroup blkio memory leakage problem
summary: >-
  A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the
  Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup
  is being destroyed, cgroup_rstat_flush() is only called at
  css_release_work_fn(), w…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-402
  - CWE-668
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.2, < 6.4'
  - linux_kernel = 6.4
  - enterprise_linux = 8.0
  - enterprise_linux = 9.0
  - fedora = 39
patched:
  - linux_kernel 6.4
published: '2024-01-12'
updated: '2026-07-21'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-0443'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2023:6583'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2023:7077'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2023:7370'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/security/cve/CVE-2024-0443'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2257968'
    label: secalert@redhat.com
  - url: >-
      https://lore.kernel.org/linux-block/20221215033132.230023-3-longman@redhat.com/
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2023:6583'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://access.redhat.com/errata/RHSA-2023:7077'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://access.redhat.com/errata/RHSA-2023:7370'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://access.redhat.com/security/cve/CVE-2024-0443'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2257968'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lore.kernel.org/linux-block/20221215033132.230023-3-longman@redhat.com/
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00249
epssPercentile: 0.16612
ingestedAt: '2026-07-21T19:53:39.194Z'
---

## Overview

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.

## Affected

- `linux_kernel >= 6.2, < 6.4`
- `linux_kernel = 6.4`
- `enterprise_linux = 8.0`
- `enterprise_linux = 9.0`
- `fedora = 39`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.4`