nbd: fix race between timeout and normal completion

CVE-2024-49855
7HIGH

Key Information

Vendor
Linux
Status
Linux
Vendor
CVE Published:
21 October 2024

Summary

In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.

Affected Version(s)

Linux < 9c25faf72d78

Linux < 6e73b946a379

Linux < 5236ada8ebbd

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

Collectors

NVD DatabaseMitre Database
.