Description
In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock. Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
117fb80cd1e63c419c7a221ce070becb4bfc7b6d to < 1cbbb3d9475c403ebedc327490c7c2b991398197affecteda6f4129378ca15f62cbdde09a7d3ccc35adcf49d to < 7d4c14f4b511fd4c0dc788084ae59b4656ace58baffected766e56faddbec2eaf70c9299e1c9ef74d846d32b to < 02a8964260756c70b20393ad4006948510ac9967affected34bff6d850019e00001129d6de3aa4874c2cf471 to < 5cb36e35bc10ea334810937990c2b9023dacb1b0affected74f6f5912693ce454384eaeec48705646a21c74f to < 432b06b69d1d354a171f7499141116536579eb6aaffected74f6f5912693ce454384eaeec48705646a21c74f to < 116599f6a26906cf33f67975c59f0692ecf7e9b2affected74f6f5912693ce454384eaeec48705646a21c74f to < 1b3ec4f7c03d4b07bad70697d7e2f4088d2cfe92affectede75396988bb9b3b90e6e8690604d0f566cea403aaffected5.4.257 to < 5.4.280affected5.10.197 to < 5.10.222affected5.15.133 to < 5.15.163affected6.1.55 to < 6.1.100affected6.5.5 to < 6.6affected
Linux Linux
Default version status: affected
6.6affected0 to < 6.6unaffected5.4.280 to ≤ 5.4.*unaffected5.10.222 to ≤ 5.10.*unaffected5.15.163 to ≤ 5.15.*unaffected6.1.100 to ≤ 6.1.*unaffected6.6.41 to ≤ 6.6.*unaffected6.9.10 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1cbbb3d9475c403ebedc327490c7c2b991398197 ↗
- https://git.kernel.org/stable/c/7d4c14f4b511fd4c0dc788084ae59b4656ace58b ↗
- https://git.kernel.org/stable/c/02a8964260756c70b20393ad4006948510ac9967 ↗
- https://git.kernel.org/stable/c/5cb36e35bc10ea334810937990c2b9023dacb1b0 ↗
- https://git.kernel.org/stable/c/432b06b69d1d354a171f7499141116536579eb6a ↗
- https://git.kernel.org/stable/c/116599f6a26906cf33f67975c59f0692ecf7e9b2 ↗
- https://git.kernel.org/stable/c/1b3ec4f7c03d4b07bad70697d7e2f4088d2cfe92 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗