In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
In gfs2_put_super(), whether withdrawn or not, the quota should be cleaned up by gfs2_quota_cleanup().
Otherwise, struct gfs2_sbd will be freed before gfs2_qd_dealloc (rcu callback) has run for all gfs2_quota_data objects, resulting in use-after-free.
Also, gfs2_destroy_threads() and gfs2_quota_cleanup() is already called by gfs2_make_fs_ro(), so in gfs2_put_super(), after calling gfs2_make_fs_ro(), there is no need to call them again.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-livepatch-5.10.227-219.884 | Feb 4, 2025 | May 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1071-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-193-genericUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-oemUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1136-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1131-awsUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-5.15.0-1068-awsUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-intelUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-258-lowlatency | Aug 22, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub