Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-46801

libfs: fix get_stashed_dentry()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: libfs: fix get_stashed_dentry() get_stashed_dentry() tries to optimistically retrieve a stashed dentry from a provided location. It needs to ensure to hold rcu lock before it dereference the stashed location to prevent UAF issues. Use rcu_dereference() instead of READ_ONCE() it's effectively equivalent with some lockdep bells and whistles and it communicates clearly that this expects rcu protection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 07fd7c329839cf0b8c7766883d830a1a0d12d1dd to < 03e2a1209a83a380df34a72f7d6d1bc6c74132c7affected
  • 07fd7c329839cf0b8c7766883d830a1a0d12d1dd to < 4e32c25b58b945f976435bbe51f39b32d714052eaffected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.10.10 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References