In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock.
Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.164-108.161Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfo | Aug 28, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade python3-perf | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 14, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Oct 31, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade dtb-alteraUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt-optional | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-gkeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1035-xilinx-zynqmp | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub