In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put().
On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list.
Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-devel | Mar 3, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1154-kvmUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-279-lowlatencyUpgrade linux-image-4.4.0-279-genericUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-4.4.0-1123-fipsUpgrade linux-image-4.4.0-1191-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub