In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debugUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvm | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-extra | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-generic-lts-wilyUpgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lts-vividUpgrade linux-image-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-generic-lts-xenialUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-4.4.0-259-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lts-utopicUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-lts-vividUpgrade linux-image-intelUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-229-genericUpgrade linux-image-5.15.0-1065-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-virtualUpgrade linux-image-5.15.0-122-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-5.15.0-122-lowlatency-64k | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub