In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix use-after-free of timer for log writer thread
Patch series "nilfs2: fix log writer related issues".
This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log.
This patch (of 3):
A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure.
The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime.
Fix this issue by limiting the use of sc_timer only while the log writer thread is alive.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel | Mar 3, 2025 | Jun 19, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 2, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-lts-utopicUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-generic-lts-wilyUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-raspi2Upgrade linux-image-generic-lts-vividUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-intelUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1136-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-259-genericUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1174-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-lts-vividUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-lts-wilyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-lowlatency-lts-wily | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub