In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock.
Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.164-108.161Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Aug 28, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Oct 31, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-develUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-oemUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1052-gkeop | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub