Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-41049
HistoryJul 29, 2024 - 2:32 p.m.

CVE-2024-41049 filelock: fix potential use-after-free in posix_lock_inode

2024-07-2914:32:05
Linux
github.com
1
linux kernel
filelock
posix_lock_inode
use-after-free
kasan uaf
spinlock

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

filelock: fix potential use-after-free in posix_lock_inode

Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode().
The request pointer had been changed earlier to point to a lock entry
that was added to the inode’s list. However, before the tracepoint could
fire, another task raced in and freed that lock.

Fix this by moving the tracepoint inside the spinlock, which should
ensure that this doesn’t happen.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial