In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-modules-extra | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-debuginfo | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-symsUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade kernel-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-base | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lts-utopicUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-5.15.0-122-lowlatency-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-5.15.0-122-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-raspi2Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-lts-vividUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oracle-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-5.15.0-1070-awsUpgrade linux-image-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1065-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-lts-wilyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-196-genericUpgrade linux-image-oemUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-vividUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-4.4.0-259-generic | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub