In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix use-after-free of timer for log writer thread
Patch series "nilfs2: fix log writer related issues".
This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log.
This patch (of 3):
A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure.
The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime.
Fix this issue by limiting the use of sc_timer only while the log writer thread is alive.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.349-266.564Upgrade perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.219-208.866Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Mar 3, 2025 | Jun 19, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 2, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-rt | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-lts-wilyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-229-genericUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-generic-lts-vividUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-utopicUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-4.4.0-259-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-lts-utopicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-lts-utopicUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1166-gcpUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-4.15.0-229-lowlatencyUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-vividUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-lts-wilyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1173-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-4.15.0-1135-oracleUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-vividUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-virtual-lts-wilyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-4.15.0-1181-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-4.4.0-259-genericUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1137-kvmUpgrade linux-image-4.4.0-1136-awsUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-4.15.0-1156-kvmUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.4.0-1174-aws | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub