In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
In gfs2_put_super(), whether withdrawn or not, the quota should be cleaned up by gfs2_quota_cleanup().
Otherwise, struct gfs2_sbd will be freed before gfs2_qd_dealloc (rcu callback) has run for all gfs2_quota_data objects, resulting in use-after-free.
Also, gfs2_destroy_threads() and gfs2_quota_cleanup() is already called by gfs2_make_fs_ro(), so in gfs2_put_super(), after calling gfs2_make_fs_ro(), there is no need to call them again.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-livepatch-5.10.228-219.884 | Feb 4, 2025 | May 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-5.15.0-1068-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1136-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-awsUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1131-awsUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.4.0-193-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp | Aug 22, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub