CVE-2024-49965CWE-667

CVE-2024-49965

High · published October 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: remove unreasonable unlock in ocfs2_read_blocks

Patch series "Misc fixes for ocfs2_read_blocks", v5.

This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix

the issue reported by syzbot, which detects bad unlock balance in

ocfs2_read_blocks(). The second patch fixes an issue reported by Heming

Zhao when reviewing above fix.

This patch (of 2):

There was a lock release before exiting, so remove the unreasonable unlock.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-667 · Improper Locking
Published
2024-10-21T22:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 4.4.204, < 4.94.9
linux/linux_kernel≥ 4.9.204, < 4.144.14
linux/linux_kernel≥ 4.14.157, < 4.194.19
linux/linux_kernel≥ 4.19.87, < 4.204.20
linux/linux_kernel≥ 4.20, < 5.10.2275.10.227
linux/linux_kernel≥ 5.11, < 5.15.1685.15.168
linux/linux_kernel≥ 5.16, < 6.1.1136.1.113
linux/linux_kernel≥ 6.2, < 6.6.556.6.55
linux/linux_kernel≥ 6.7, < 6.10.146.10.14
linux/linux_kernel≥ 6.11, < 6.11.36.11.3
References (11)
EPSS history
Timeline
  • 21 OCT 18:02Z
    ocfs2: remove unreasonable unlock in ocfs2_read_blocks
    cvelistv5