In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade python3-perfUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-debug-coreUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matched | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-cross-headers | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-armUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azure | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-utopicUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-5.15.0-122-genericUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1065-nvidia-lowlatencyUpgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1070-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-122-lowlatency-64kUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-oem-20.04dUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-virtual-lts-vividUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-4.4.0-1136-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-wilyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-lts-wilyUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-generic-lts-vividUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-oemUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-aws | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub