← Zuruck zu CVEs

CVE-2024-41049

HIGH

7.0

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock. Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.

CVE Details

CVSS v3.1 Bewertung7.0

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatHIGH

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht7/29/2024

Zuletzt geandert11/3/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

linux:linux_kernel

Schwachen (CWE)

CWE-416

Referenzen

https://git.kernel.org/stable/c/02a8964260756c70b20393ad4006948510ac9967(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/116599f6a26906cf33f67975c59f0692ecf7e9b2(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/1b3ec4f7c03d4b07bad70697d7e2f4088d2cfe92(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/1cbbb3d9475c403ebedc327490c7c2b991398197(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/432b06b69d1d354a171f7499141116536579eb6a(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/5cb36e35bc10ea334810937990c2b9023dacb1b0(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/7d4c14f4b511fd4c0dc788084ae59b4656ace58b(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/02a8964260756c70b20393ad4006948510ac9967(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/116599f6a26906cf33f67975c59f0692ecf7e9b2(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/1b3ec4f7c03d4b07bad70697d7e2f4088d2cfe92(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/1cbbb3d9475c403ebedc327490c7c2b991398197(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/432b06b69d1d354a171f7499141116536579eb6a(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/5cb36e35bc10ea334810937990c2b9023dacb1b0(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/7d4c14f4b511fd4c0dc788084ae59b4656ace58b(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.