CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
The Linux kernel CVE team has assigned CVE-2024-38570 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024061956-CVE-2024-38570-a8ef@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix potential glock use-after-free on unmount
When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.
To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sddeadglocks list, release the lockspace, and only then free those glocks.
As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.
— NVD
Linux Kernel is vulnerable to a denial of service, caused by Glock Use-After-Free on Unmount. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38570?
CVE-2024-38570 has been classified as a high-severity vulnerability due to its potential impact on the Linux kernel.
How do I fix CVE-2024-38570?
To remediate CVE-2024-38570, update the kernel package to version 6.6.33 or later, or to version 6.8.12 or later.
Which Linux kernel versions are affected by CVE-2024-38570?
CVE-2024-38570 affects Linux kernel versions prior to 6.6.33, 6.8.12, and 6.9.3.
What is the cause of CVE-2024-38570?
CVE-2024-38570 stems from a potential glock use-after-free issue that can occur during the unmounting process in the Linux kernel.
Is CVE-2024-38570 present in the latest Linux kernel releases?
CVE-2024-38570 has been resolved in the latest Linux kernel releases, specifically versions 6.6.33 and above.