In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade rvUpgrade kernelUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-devel | Sep 26, 2024 | Jun 19, 2024 |
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 6, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade perf | Oct 2, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-marvellUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade dtb-apple | Jul 23, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.4.0-196-generic-lpaeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1069-gcpUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1073-azure-fdeUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-122-genericUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-122-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.4.0-1117-raspiUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-5.4.0-1121-kvmUpgrade linux-image-5.15.0-1065-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1036-xilinx-zynqmpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-122-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1070-awsUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-lts-utopicUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-5.4.0-1132-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1093-bluefieldUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-lts-vividUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1100-gkeopUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1065-nvidia-lowlatencyUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-5.15.0-1063-ibmUpgrade linux-image-5.15.0-1068-oracleUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1173-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-generic-lts-wilyUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-5.15.0-1067-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-196-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-122-generic-lpaeUpgrade linux-image-5.15.0-1065-nvidiaUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-5.15.0-122-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1137-gcpUpgrade linux-image-5.4.0-196-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1133-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-generic-lts-vividUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-5.15.0-1073-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1138-azureUpgrade linux-image-5.4.0-1080-ibmUpgrade linux-image-5.15.0-1067-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1052-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1063-raspiUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1053-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-ibm | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub