In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
The GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the lru list in __gfs2_glock_put().
On the shrink scan path, the same flag is cleared under lru_lock but because of cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the put side can be made without deleting the glock from the lru list.
Keep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both sides - clear GLF_LRU after list_del under lru_lock.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel | Mar 3, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-devel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-279-genericUpgrade linux-image-genericUpgrade linux-image-4.4.0-1191-awsUpgrade linux-image-4.4.0-279-lowlatencyUpgrade linux-image-4.4.0-1123-fipsUpgrade linux-image-4.4.0-1153-awsUpgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1154-kvmUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenial | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub