In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade libperfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade perf | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-kvm | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-apm | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspiUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-259-genericUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-lts-wilyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-generic-lts-vividUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lts-wilyUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-oemUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-5.15.0-122-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-generic-lts-utopicUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-122-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-lts-vividUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1070-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1065-nvidia-lowlatency | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub