gfs2: Fix unlikely race in gdlm_put_lock
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.5, 4.10, 4.15, 4.20, 5.5, and 7 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix unlikely race in gdlm_put_lock In gdlm_put_lock(), there is a small window of time in which the DFL_UNMOUNT flag has been set but the lockspace hasn't been released, yet. In that window, dlm may still call gdlm_ast() and gdlm_bast(). To prevent it from dereferencing freed glock objects, only free the glock if the lockspace has actually been released.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From d1340f80f0b8066321b499a376780da00560e857 · fixed in 5fdc1474e678eea1700aa266c0b7c2c96f81dd0d; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 4913592a3358f6ec366b8346b733d5e2360b08e1; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 279bde3bbb0ac0bad5c729dfa85983d75a5d7641; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 64c61b4ac645222fa7b724cef616c1f862a72a40; From d1340f80f0b8066321b499a376780da00560e857 · fixed in 28c4d9bc0708956c1a736a9e49fee71b65deee81; From 4.4.284 · fixed in 4.5; From 4.9.283 · fixed in 4.10; From 4.14.247 · fixed in 4.15; From 4.19.207 · fixed in 4.20; From 5.4.148 · fixed in 5.5; From 5.10.67 · fixed in 5.11; From 5.13.19 · fixed in 5.14; From 5.14.6 · fixed in 5.15
- Linux Linux
5.15
- KernelLinux
From 5.15.0 · fixed in 6.1.168; From 6.2.0 · fixed in 6.6.131; From 6.7.0 · fixed in 6.12.56; From 6.13.0 · fixed in 6.17.6