In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix use-after-free of timer for log writer thread
Patch series "nilfs2: fix log writer related issues".
This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log.
This patch (of 3):
A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure.
The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime.
Fix this issue by limiting the use of sc_timer only while the log writer thread is alive.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo | Mar 3, 2025 | Jun 19, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 2, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-syms-azure | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-4.4.0-1174-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oem-osp1Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-lts-vividUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-generic-lts-vividUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-genericUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lts-wilyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lts-utopicUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04b | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub