In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock.
Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.223-211.872Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.164-108.161 | Aug 28, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Oct 31, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-default-extraUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-marvell | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-intelUpgrade linux-image-raspi-nolpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-ibm-lts-24.04 | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub