In the Linux kernel, the following vulnerability has been resolved:
filelock: fix potential use-after-free in posix_lock_inode
Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock.
Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.164-108.161Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfo-common-x86_64 | Aug 28, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-livepatch-6.1.102-108.177Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 14, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Oct 31, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade dtb-apmUpgrade dtb-armUpgrade ocfs2-kmp-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-oracleUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub