Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-39494

ima: Fix use-after-free on a dentry's dname.name

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name ->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->d_lock on its parent, ->i_rwsem exclusive on the parent's inode, rename_lock), but none of those are met at any of the sites. Take a stable snapshot of the name instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < 480afcbeb7aaaa22677d3dd48ec590b441eaac1aaffected
  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < edf287bc610b18d7a9c0c0c1cb2e97b9348c71bbaffected
  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < 0b31e28fbd773aefb6164687e0767319b8199829affected
  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < 7fb374981e31c193b1152ed8d3b0a95b671330d4affected
  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < dd431c3ac1fc34a9268580dd59ad3e3c76b32a8caffected
  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < a78a6f0da57d058e2009e9958fdcef66f165208caffected
  • 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to < be84f32bb2c981ca670922e047cdde1488b233deaffected

Linux Linux

Default version status: affected

  • 3.7affected
  • 0 to < 3.7unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.174 to ≤ 5.15.*unaffected
  • 6.1.97 to ≤ 6.1.*unaffected
  • 6.6.35 to ≤ 6.6.*unaffected
  • 6.9.6 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References