In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nilfs_dat_translate() fails. If the reference count hits 0 and its owner page gets unlocked, bh may be freed. However, bh->b_page is dereferenced to put the page after that, which may result in a use-after-free bug. This patch moves the release operation after unlocking and putting the page.
NOTE: The function in question is only called in GC, and in combination with current userland tools, address translation using DAT does not occur in that function, so the code path that causes this issue will not be executed. However, it is possible to run that code path by intentionally modifying the userland GC library or by calling the GC ioctl directly.
[[email protected]: NOTE added to the commit log]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.198-187.748Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-4.14.327-246.539Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Aug 2, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-macrosUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdump | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1152-kvmUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1131-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1132-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-254-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1168-awsUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1177-azureUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1169-awsUpgrade linux-image-4.4.0-1131-awsUpgrade linux-image-4.15.0-225-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-225-genericUpgrade linux-image-4.4.0-254-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1162-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle | May 20, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub