CVE-2024-41049
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
filelock: fix potential use-after-free in posix_lock_inode
In the Linux kernel, the following vulnerability has been resolved: filelock: fix potential use-after-free in posix_lock_inode Light Hsieh reported a KASAN UAF warning in trace_posix_lock_inode(). The request pointer had been changed earlier to point to a lock entry that was added to the inode's list. However, before the tracepoint could fire, another task raced in and freed that lock. Fix this by moving the tracepoint inside the spinlock, which should ensure that this doesn't happen.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 117fb80cd1e63c419c7a221ce070becb4bfc7b6d | affected | git | 1cbbb3d9475c403ebedc327490c7c2b991398197 | Unavailable | None listed |
| a6f4129378ca15f62cbdde09a7d3ccc35adcf49d | affected | git | 7d4c14f4b511fd4c0dc788084ae59b4656ace58b | Unavailable | None listed |
| 766e56faddbec2eaf70c9299e1c9ef74d846d32b | affected | git | 02a8964260756c70b20393ad4006948510ac9967 | Unavailable | None listed |
| 34bff6d850019e00001129d6de3aa4874c2cf471 | affected | git | 5cb36e35bc10ea334810937990c2b9023dacb1b0 | Unavailable | None listed |
| 74f6f5912693ce454384eaeec48705646a21c74f | affected | git | 432b06b69d1d354a171f7499141116536579eb6a | Unavailable | None listed |
| 74f6f5912693ce454384eaeec48705646a21c74f | affected | git | 116599f6a26906cf33f67975c59f0692ecf7e9b2 | Unavailable | None listed |
| 74f6f5912693ce454384eaeec48705646a21c74f | affected | git | 1b3ec4f7c03d4b07bad70697d7e2f4088d2cfe92 | Unavailable | None listed |
| e75396988bb9b3b90e6e8690604d0f566cea403a | affected | git | Unavailable | Unavailable | None listed |
| 5.4.257 | affected | semver | 5.4.280 | Unavailable | None listed |
| 5.10.197 | affected | semver | 5.10.222 | Unavailable | None listed |
| 5.15.133 | affected | semver | 5.15.163 | Unavailable | None listed |
| 6.1.55 | affected | semver | 6.1.100 | Unavailable | None listed |
| 6.5.5 | affected | semver | 6.6 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.6 | Unavailable | None listed |
| 5.4.280 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.222 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.163 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.100 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.41 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.9.10 | unaffected | semver | Unavailable | 6.9.* | None listed |
| 6.10 | unaffected | original_commit_for_fix | Unavailable | * | None listed |