SECUFOCUSNOW
Home›CVE index›CVE-2024-27058
Review reviewHigh

CVE-2024-27058

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: tmpfs: fix race on handling dquot rbtree A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree. Fetching the rb_tree root node must also be protected by the dqopt->dqio_sem, otherwise, giving the right timing, shmem_release_dquot() will trigger a warning because it couldn't find a node in the tree, when the real reason was the root node changing before the search starts: Thread 1 Thread 2 - shmem_release_dquot() - shmem_{acquire,release}_dquot() - fetch ROOT - Fetch ROOT - acquire...

CVSS
7.8
EPSS
0.39%
31.2% percentile
CISA KEV
Not listed
Published
2024.05.01
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.39%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: tmpfs: fix race on handling dquot rbtree A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree. Fetching the rb_tree root node must also be protected by the dqopt->dqio_sem, otherwise, giving the right timing, shmem_release_dquot() will trigger a warning because it couldn't find a node in the tree, when the real reason was the root node changing before the search starts: Thread 1 Thread 2 - shmem_release_dquot() - shmem_{acquire,release}_dquot() - fetch ROOT - Fetch ROOT - acquire...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= eafc474e202978ac735c551d5ee1eb8c02e2be54 < c7077f43f30d817d10a9f8245e51576ac114b2f0, >= eafc474e202978ac735c551d5ee1eb8c02e2be54 < 617d55b90e73c7b4aa2733ca6cc3f9b72d1124bb, >= eafc474e202978ac735c551d5ee1eb8c02e2be54 < f82f184874d2761ebaa60dccf577921a0dbb3810, >= eafc474e202978ac735c551d5ee1eb8c02e2be54 < 0a69b6b3a026543bc215ccc866d0aea5579e6ce2, >= 6.6, >= 6.6 < 6.6.24, >= 6.7 < 6.7.12, >= 6.8 < 6.8.3, 6.9
Fixed versions
6.6.24, 6.7.12, 6.8.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-362
CVE-2024-27058 — Linux Linux, linux kernel | SECUFOCUS NOW