Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-26622

tomoyo: fix UAF write bug in tomoyo_write_control()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control() Since tomoyo_write_control() updates head->write_buf when write() of long lines is requested, we need to fetch head->write_buf after head->io_sem is held. Otherwise, concurrent write() requests can cause use-after-free-write and double-free problems.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to < a23ac1788e2c828c097119e9a3178f0b7e503feeaffected
  • bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to < 7d930a4da17958f869ef679ee0e4a8729337affcaffected
  • bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to < 3bfe04c1273d30b866f4c7c238331ed3b08e5824affected
  • bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to < 2caa605079488da9601099fbda460cfc1702839faffected
  • bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to < 6edefe1b6c29a9932f558a898968a9fcbeec5711affected
  • bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to < 2f03fc340cac9ea1dc63cbf8c93dd2eb0f227815affected

Linux Linux

Default version status: affected

  • 3.1affected
  • 0 to < 3.1unaffected
  • 5.10.212 to ≤ 5.10.*unaffected
  • 5.15.151 to ≤ 5.15.*unaffected
  • 6.1.81 to ≤ 6.1.*unaffected
  • 6.6.21 to ≤ 6.6.*unaffected
  • 6.7.9 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References