In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix use-after-free of timer for log writer thread
Patch series "nilfs2: fix log writer related issues".
This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log.
This patch (of 3):
A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure.
The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime.
Fix this issue by limiting the use of sc_timer only while the log writer thread is alive.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.349-266.564Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.219-208.866Upgrade python-perf-debuginfo | Mar 3, 2025 | Jun 19, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 2, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade dtb-renesasUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-socionext | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-raspi2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-generic-lts-utopicUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-generic-lts-wilyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-virtual-lts-utopicUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lts-vividUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-4.15.0-1173-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-4.4.0-1174-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1181-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-lts-vividUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-lts-vividUpgrade linux-image-lowlatency-lts-xenial | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub