In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
In gfs2_put_super(), whether withdrawn or not, the quota should be cleaned up by gfs2_quota_cleanup().
Otherwise, struct gfs2_sbd will be freed before gfs2_qd_dealloc (rcu callback) has run for all gfs2_quota_data objects, resulting in use-after-free.
Also, gfs2_destroy_threads() and gfs2_quota_cleanup() is already called by gfs2_make_fs_ro(), so in gfs2_put_super(), after calling gfs2_make_fs_ro(), there is no need to call them again.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-livepatch-5.10.230-223.885 | Feb 4, 2025 | May 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-intelUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1136-azureUpgrade linux-image-5.15.0-1068-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-5.4.0-193-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1071-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-gcp | Aug 22, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub