Medium · CVSS 5.5CVE-2024-0443

Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.CVE-2024-0443

Answer in brief

CVE-2024-0443 records a Medium severity (CVSS 5.5) vulnerability in Kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.. The current sources do not mark it as known exploited. The current feed maps kernel (generic), Red Hat/kernel (generic), Red Hat/kernel-rt (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Jan 11, 2024Updated Oct 26, 2026Source checked Oct 26, 2026First seen by HOL Oct 26, 2026Material review Oct 26, 2026

Upstream Advisory

Key facts

Risk: Medium · CVSS 5.5
Exploitation: Not marked as known exploited
Affected software: 3 mapped packages or products
Fix availability: Available

Why this deserves its current priority

CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps kernel (generic), Red Hat/kernel (generic), Red Hat/kernel-rt (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
kernelgeneric	>=0 <6.4-rc7	6.4-rc7
Red Hat/kernelgeneric	*	Not reported
Red Hat/kernel-rtgeneric	*	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for kernel, Red Hat/kernel, Red Hat/kernel-rt.
Review the reported fix. Source-reported workaround: This flaw can be mitigated with the possible workaround identified below: - systemd.unified_cgroup_hierarchy=1 or - cgroup_disable=blkio

Evidence timeline and material changes

Published upstream
Jan 11, 2024
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Oct 26, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Oct 26, 2026

Sources and claim methodology

Upstream source description

A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgroup_rstat_flush() is only called at css_release_work_fn(), which is called when the blkcg reference count reaches 0. This circular dependency will prevent blkcg and some blkgs from being freed after they are made offline. This issue may allow an attacker with a local access to cause system instability, such as an out of memory error.

Quoted source text, attributed separately from HOL analysis.