In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
In gfs2_put_super(), whether withdrawn or not, the quota should be cleaned up by gfs2_quota_cleanup().
Otherwise, struct gfs2_sbd will be freed before gfs2_qd_dealloc (rcu callback) has run for all gfs2_quota_data objects, resulting in use-after-free.
Also, gfs2_destroy_threads() and gfs2_quota_cleanup() is already called by gfs2_make_fs_ro(), so in gfs2_put_super(), after calling gfs2_make_fs_ro(), there is no need to call them again.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.230-223.885Upgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-livepatch-5.10.228-219.884 | Feb 4, 2025 | May 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-193-genericUpgrade linux-image-genericUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1136-azureUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1068-awsUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-aws-lts-18.04 | Aug 22, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub