In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put().
On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list.
Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421 | Mar 3, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-preempt | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1154-kvmUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-fipsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-279-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1191-awsUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-279-genericUpgrade linux-image-4.4.0-1123-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub