Bottlerocket: kernel-6.1: security update to 2.3.2

high Tenable Cloud Security Plugin ID 427973

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- In the Linux kernel, the following vulnerability has been resolved: cachefiles: cyclic allocation of
msg_id to avoid reuse Reusing the msg_id after a maliciously completed reopen request may cause a read
request to remain unprocessed and result in a hung, as shown below: t1 | t2 | t3
------------------------------------------------- cachefiles_ondemand_select_req
cachefiles_ondemand_object_is_close(A) cachefiles_ondemand_set_object_reopening(A)
queue_work(fscache_object_wq, &info->work) ondemand_object_worker cachefiles_ondemand_init_object(A)
cachefiles_ondemand_send_req(OPEN) // get msg_id 6 wait_for_completion(&req_A->done)
cachefiles_ondemand_daemon_read // read msg_id 6 req_A cachefiles_ondemand_get_fd copy_to_user //
Malicious completion msg_id 6 copen 6,-1 cachefiles_ondemand_copen complete(&req_A->done) // will not set
the object to close // because ondemand_id && fd is valid. // ondemand_object_worker() is done // but the
object is still reopening. // new open req_B cachefiles_ondemand_init_object(B)
cachefiles_ondemand_send_req(OPEN) // reuse msg_id 6 process_open_req copen 6,A.size // The expected
failed copen was executed successfully Expect copen to fail, and when it does, it closes fd, which sets
the object to close, and then close triggers reopen again. However, due to msg_id reuse resulting in a
successful copen, the anonymous fd is not closed until the daemon exits. Therefore read requests waiting
for reopen to complete may trigger hung task. To avoid this issue, allocate the msg_id cyclically to avoid
reusing the msg_id for a very short duration of time. (CVE-2024-41050)

Plugin Details

Severity: High

ID: 427973

Version: Revision 1.3

Type: Local

Family: Bottlerocket Local Security Checks

Published: 6/30/2025

Updated: 9/29/2025

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.15

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2024-41050

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/29/2024

Reference Information

CVE: CVE-2024-41050

Detections

Analytics