In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock.
Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.164-108.161Upgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfo | Aug 28, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.102-108.177Upgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perf-debuginfo | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-kvmUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-nvidia | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub