CVE-2024-26622

tomoyo: fix UAF write bug in tomoyo_write_control()

published March 4, 2024

CVSS
—
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tomoyo: fix UAF write bug in tomoyo_write_control()

Since tomoyo_write_control() updates head->write_buf when write()

of long lines is requested, we need to fetch head->write_buf after

head->io_sem is held. Otherwise, concurrent write() requests can

cause use-after-free-write and double-free problems.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Published
2024-03-04T06:40Z
EPSS history
Timeline
  • 04 MAR 06:40Z
    tomoyo: fix UAF write bug in tomoyo_write_control()
    cvelistv5