In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock.
Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.164-108.161Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel | Aug 28, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.102-108.177 | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 14, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Oct 31, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-source-rtUpgrade dtb-apm | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04 | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub