In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modulesUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade libperf | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-debug-debuginfo | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-broadcom | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-vividUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lts-wilyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lts-vividUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oemUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-5.15.0-122-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1065-nvidia-lowlatencyUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1070-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-122-genericUpgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-lts-vividUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-generic-lts-utopicUpgrade linux-image-raspi2Upgrade linux-image-azure-lts-20.04 | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub