CVE-2024-47746

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47746
In the Linux kernel, the following vulnerability has been resolved: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set This may be a typo. The comment has said shared locks are not allowed when this bit is set. If using shared lock, the wait in `fuse_file_cached_io_open` may be forever.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2f3d8ff457982f4055fe8f7bf19d3821ba22c376 Patch
https://git.kernel.org/stable/c/4e181761ffec67307157a7e8a78d58ee4130cf00 Patch
https://git.kernel.org/stable/c/fa4890bd8237e5a1e7428acd7328729db2703b23 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

22 Oct 2024, 16:00

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2f3d8ff457982f4055fe8f7bf19d3821ba22c376 - () https://git.kernel.org/stable/c/2f3d8ff457982f4055fe8f7bf19d3821ba22c376 - Patch
References () https://git.kernel.org/stable/c/4e181761ffec67307157a7e8a78d58ee4130cf00 - () https://git.kernel.org/stable/c/4e181761ffec67307157a7e8a78d58ee4130cf00 - Patch
References () https://git.kernel.org/stable/c/fa4890bd8237e5a1e7428acd7328729db2703b23 - () https://git.kernel.org/stable/c/fa4890bd8237e5a1e7428acd7328729db2703b23 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-667
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fuse: use un bloqueo exclusivo cuando FUSE_I_CACHE_IO_MODE está configurado. Esto puede ser un error tipográfico. El comentario decía que no se permiten bloqueos compartidos cuando este bit está configurado. Si se usa un bloqueo compartido, la espera en `fuse_file_cached_io_open` puede ser eterna.

21 Oct 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 13:15

Updated : 2024-10-22 16:00

NVD link : CVE-2024-47746

Mitre link : CVE-2024-47746

CVE.ORG link : CVE-2024-47746

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking