https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:51:56 +0000 https://vulnerability.circl.lu/vuln/cve-2024-27058 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tmpfs: fix race on handling dquot rbtree</p> <p>A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree.</p> <p>Fetching the rb_tree root node must also be protected by the dqopt-&gt;dqio_sem, otherwise, giving the right timing, shmem_release_dquot() will trigger a warning because it couldn&#39;t find a node in the tree, when the real reason was the root node changing before the search starts:</p> <p>Thread 1 Thread 2 - shmem_release_dquot() - shmem_{acquire,release}_dquot()</p> <p>- fetch ROOT - Fetch ROOT</p> <p>- acquire dqio_sem - wait dqio_sem</p> <p>- do something, triger a tree rebalance - release dqio_sem</p> <p>- acquire dqio_sem - start searching for the node, but from the wrong location, missing the node, and triggering a warning.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tmpfs: fix race on handling dquot rbtree</p> <p>A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree.</p> <p>Fetching the rb_tree root node must also be protected by the dqopt-&gt;dqio_sem, otherwise, giving the right timing, shmem_release_dquot() will trigger a warning because it couldn&#39;t find a node in the tree, when the real reason was the root node changing before the search starts:</p> <p>Thread 1 Thread 2 - shmem_release_dquot() - shmem_{acquire,release}_dquot()</p> <p>- fetch ROOT - Fetch ROOT</p> <p>- acquire dqio_sem - wait dqio_sem</p> <p>- do something, triger a tree rebalance - release dqio_sem</p> <p>- acquire dqio_sem - start searching for the node, but from the wrong location, missing the node, and triggering a warning.</p> https://vulnerability.circl.lu/vuln/cve-2024-27058