Skip to main content
← All vulnerabilities
CVE-2025-40242

gfs2: Fix unlikely race in gdlm_put_lock

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.5, 4.10, 4.15, 4.20, 5.5, and 7 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix unlikely race in gdlm_put_lock In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From d1340f80f0b8066321b499a376780da00560e857 · fixed in 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 4913592a3358f6ec366b8346b733d5e2360b08e1; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 279bde3bbb0ac0bad5c729dfa85983d75a5d7641; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 64c61b4ac645222fa7b724cef616c1f862a72a40; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 28c4d9bc0708956c1a736a9e49fee71b65deee81; From 4.4.284 · fixed in 4.5; From 4.9.283 · fixed in 4.10; From 4.14.247 · fixed in 4.15; From 4.19.207 · fixed in 4.20; From 5.4.148 · fixed in 5.5; From 5.10.67 · fixed in 5.11; From 5.13.19 · fixed in 5.14; From 5.14.6 · fixed in 5.15

  • Linux Linux

    5.15

  • KernelLinux

    From 5.15.0 · fixed in 6.1.168; From 6.2.0 · fixed in 6.6.131; From 6.7.0 · fixed in 6.12.56; From 6.13.0 · fixed in 6.17.6

References 5

git.kernel.org