---
id: CVE-2024-56624
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Fix out_fput in iommufd_fault_alloc()

  As fput() calls the file->f_op->release op, where fault obj and ictx are
  getting released, there is no need to release t…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iommufd: Fix out_fput in iommufd_fault_alloc()

  As fput() calls the file->f_op->release op, where fault obj and ictx are
  getting released, there is no need to release t…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-401
  - CWE-20
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.11, < 6.12.5'
  - linux_kernel = 6.13
patched:
  - linux_kernel 6.12.5
published: '2024-12-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:18:01.677'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-56624'
references:
  - url: 'https://git.kernel.org/stable/c/2b3f30c8edbf9a122ce01f13f0f41fbca5f1d41d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/af7f4780514f850322b2959032ecaa96e4b26472'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56624.json
  - url: 'https://access.redhat.com/security/cve/CVE-2024-56624'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2334443'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2024-56624'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-56624'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024122711-CVE-2024-56624-35f7@gregkh/T
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
  - score-dispute
epss: 0.00188
epssPercentile: 0.08294
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:41:07.307658Z'
scores:
  nvd: 7.8
  vendor: 5.5
  cna: 7.8
ingestedAt: '2026-10-15T22:48:25.444Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iommufd: Fix out_fput in iommufd_fault_alloc()

As fput() calls the file->f_op->release op, where fault obj and ictx are
getting released, there is no need to release these two after fput() one
more time, which would result in imbalanced refcounts:
  refcount_t: decrement hit 0; leaking memory.
  WARNING: CPU: 48 PID: 2369 at lib/refcount.c:31 refcount_warn_saturate+0x60/0x230
  Call trace:
   refcount_warn_saturate+0x60/0x230 (P)
   refcount_warn_saturate+0x60/0x230 (L)
   iommufd_fault_fops_release+0x9c/0xe0 [iommufd]
  ...
  VFS: Close: file count is 0 (f_op=iommufd_fops [iommufd])
  WARNING: CPU: 48 PID: 2369 at fs/open.c:1507 filp_flush+0x3c/0xf0
  Call trace:
   filp_flush+0x3c/0xf0 (P)
   filp_flush+0x3c/0xf0 (L)
   __arm64_sys_close+0x34/0x98
  ...
  imbalanced put on file reference count
  WARNING: CPU: 48 PID: 2369 at fs/file.c:74 __file_ref_put+0x100/0x138
  Call trace:
   __file_ref_put+0x100/0x138 (P)
   __file_ref_put+0x100/0x138 (L)
   __fput_sync+0x4c/0xd0

Drop those two lines to fix the warnings above.

## Affected

- `linux_kernel >= 6.11, < 6.12.5`
- `linux_kernel = 6.13`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.12.5`

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56624.json)