CVE-2024-38583

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38583
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log. This patch (of 3): A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure. The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime. Fix this issue by limiting the use of sc_timer only while the log writer thread is alive.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6 Patch
https://git.kernel.org/stable/c/67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 Patch
https://git.kernel.org/stable/c/68e738be5c518fc3c4e9146b66f67c8fee0135fb Patch
https://git.kernel.org/stable/c/822ae5a8eac30478578a75f7e064f0584931bf2d Patch
https://git.kernel.org/stable/c/82933c84f188dcfe89eb26b0b48ab5d1ca99d164 Patch
https://git.kernel.org/stable/c/86a30d6302deddb9fb97ba6fc4b04d0e870b582a Patch
https://git.kernel.org/stable/c/e65ccf3a4de4f0c763d94789615b83e11f204438 Patch
https://git.kernel.org/stable/c/f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 Patch
https://git.kernel.org/stable/c/f9186bba4ea282b07293c1c892441df3a5441cb0 Patch
https://git.kernel.org/stable/c/2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6 Patch
https://git.kernel.org/stable/c/67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 Patch
https://git.kernel.org/stable/c/68e738be5c518fc3c4e9146b66f67c8fee0135fb Patch
https://git.kernel.org/stable/c/822ae5a8eac30478578a75f7e064f0584931bf2d Patch
https://git.kernel.org/stable/c/82933c84f188dcfe89eb26b0b48ab5d1ca99d164 Patch
https://git.kernel.org/stable/c/86a30d6302deddb9fb97ba6fc4b04d0e870b582a Patch
https://git.kernel.org/stable/c/e65ccf3a4de4f0c763d94789615b83e11f204438 Patch
https://git.kernel.org/stable/c/f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 Patch
https://git.kernel.org/stable/c/f9186bba4ea282b07293c1c892441df3a5441cb0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

21 Nov 2024, 09:26

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6 - Patch () https://git.kernel.org/stable/c/2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6 - Patch
References () https://git.kernel.org/stable/c/67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 - Patch () https://git.kernel.org/stable/c/67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 - Patch
References () https://git.kernel.org/stable/c/68e738be5c518fc3c4e9146b66f67c8fee0135fb - Patch () https://git.kernel.org/stable/c/68e738be5c518fc3c4e9146b66f67c8fee0135fb - Patch
References () https://git.kernel.org/stable/c/822ae5a8eac30478578a75f7e064f0584931bf2d - Patch () https://git.kernel.org/stable/c/822ae5a8eac30478578a75f7e064f0584931bf2d - Patch
References () https://git.kernel.org/stable/c/82933c84f188dcfe89eb26b0b48ab5d1ca99d164 - Patch () https://git.kernel.org/stable/c/82933c84f188dcfe89eb26b0b48ab5d1ca99d164 - Patch
References () https://git.kernel.org/stable/c/86a30d6302deddb9fb97ba6fc4b04d0e870b582a - Patch () https://git.kernel.org/stable/c/86a30d6302deddb9fb97ba6fc4b04d0e870b582a - Patch
References () https://git.kernel.org/stable/c/e65ccf3a4de4f0c763d94789615b83e11f204438 - Patch () https://git.kernel.org/stable/c/e65ccf3a4de4f0c763d94789615b83e11f204438 - Patch
References () https://git.kernel.org/stable/c/f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 - Patch () https://git.kernel.org/stable/c/f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 - Patch
References () https://git.kernel.org/stable/c/f9186bba4ea282b07293c1c892441df3a5441cb0 - Patch () https://git.kernel.org/stable/c/f9186bba4ea282b07293c1c892441df3a5441cb0 - Patch

01 Aug 2024, 19:51

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6 - () https://git.kernel.org/stable/c/2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6 - Patch
References () https://git.kernel.org/stable/c/67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 - () https://git.kernel.org/stable/c/67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148 - Patch
References () https://git.kernel.org/stable/c/68e738be5c518fc3c4e9146b66f67c8fee0135fb - () https://git.kernel.org/stable/c/68e738be5c518fc3c4e9146b66f67c8fee0135fb - Patch
References () https://git.kernel.org/stable/c/822ae5a8eac30478578a75f7e064f0584931bf2d - () https://git.kernel.org/stable/c/822ae5a8eac30478578a75f7e064f0584931bf2d - Patch
References () https://git.kernel.org/stable/c/82933c84f188dcfe89eb26b0b48ab5d1ca99d164 - () https://git.kernel.org/stable/c/82933c84f188dcfe89eb26b0b48ab5d1ca99d164 - Patch
References () https://git.kernel.org/stable/c/86a30d6302deddb9fb97ba6fc4b04d0e870b582a - () https://git.kernel.org/stable/c/86a30d6302deddb9fb97ba6fc4b04d0e870b582a - Patch
References () https://git.kernel.org/stable/c/e65ccf3a4de4f0c763d94789615b83e11f204438 - () https://git.kernel.org/stable/c/e65ccf3a4de4f0c763d94789615b83e11f204438 - Patch
References () https://git.kernel.org/stable/c/f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 - () https://git.kernel.org/stable/c/f5d4e04634c9cf68bdf23de08ada0bb92e8befe7 - Patch
References () https://git.kernel.org/stable/c/f9186bba4ea282b07293c1c892441df3a5441cb0 - () https://git.kernel.org/stable/c/f9186bba4ea282b07293c1c892441df3a5441cb0 - Patch
CWE CWE-416
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

15 Jul 2024, 07:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 13:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

20 Jun 2024, 12:44

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: corrige el use-after-free del temporizador para el hilo del escritor de registros Serie de parches "nilfs2: corrige problemas relacionados con el escritor de registros". Esta serie de corrección de errores cubre tres problemas relacionados con el escritor de registros nilfs2, incluido un problema de use-after-free del temporizador y un posible problema de bloqueo al desmontar, y un posible problema de congelación en la sincronización de eventos encontrado durante su análisis. Los detalles se describen en cada registro de confirmación. Este parche (de 3): Se informó un problema de use-after-free con respecto al temporizador sc_timer en la estructura nilfs_sc_info. El problema es que, aunque se utiliza para reactivar un subproceso de escritura de registros inactivo, sc_timer no se cierra hasta que la estructura nilfs_sc_info está a punto de liberarse y se utiliza independientemente de la vida útil del subproceso. Solucione este problema limitando el uso de sc_timer solo mientras el subproceso del escritor de registros esté activo.

19 Jun 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-19 14:15

Updated : 2024-11-21 09:26

NVD link : CVE-2024-38583

Mitre link : CVE-2024-38583

CVE.ORG link : CVE-2024-38583

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free