In the Linux kernel, the following vulnerability has been resolved:
ocfs2: cancel dqi_sync_work before freeing oinfo
ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the
end, if error occurs after successfully reading global quota, it will
trigger the following warning with CONFIG_DEBUG_OBJECTS_* enabled:
ODEBUG: free active (active state 0) object: 00000000d8b0ce28 object type: timer_list hint: qsync_work_fn+0x0/0x16c
This reports that there is an active delayed work when freeing oinfo in
error handling, so cancel dqi_sync_work first. BTW, return status instead
of -1 when .read_file_info fails.
References
Configurations
Configuration 1 (hide)
|
History
08 Nov 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Nov 2024, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | () https://git.kernel.org/stable/c/0d707a33c84b371cb66120e198eed3374726ddd8 - Patch | |
| References | () https://git.kernel.org/stable/c/14114d8148db07e7946fb06b56a50cfa425e26c7 - Patch | |
| References | () https://git.kernel.org/stable/c/35fccce29feb3706f649726d410122dd81b92c18 - Patch | |
| References | () https://git.kernel.org/stable/c/4173d1277c00baeedaaca76783e98b8fd0e3c08d - Patch | |
| References | () https://git.kernel.org/stable/c/a4346c04d055bf7e184c18a73dbd23b6a9811118 - Patch | |
| References | () https://git.kernel.org/stable/c/bbf41277df8b33fbedf4750a9300c147e8f104eb - Patch | |
| References | () https://git.kernel.org/stable/c/ef768020366f47d23f39c4f57bcb03af6d1e24b3 - Patch | |
| First Time |
Linux linux Kernel
Linux |
|
| CWE | CWE-416 | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
23 Oct 2024, 15:13
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
21 Oct 2024, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-21 18:15
Updated : 2024-11-08 16:15
NVD link : CVE-2024-49966
Mitre link : CVE-2024-49966
CVE.ORG link : CVE-2024-49966
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free