https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 02:38:22 +0000 https://vulnerability.circl.lu/vuln/cve-2024-38570 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>gfs2: Fix potential glock use-after-free on unmount</p> <p>When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn&#39;t want to unlock and then release the lockspace. This didn&#39;t take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.</p> <p>To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.</p> <p>As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>gfs2: Fix potential glock use-after-free on unmount</p> <p>When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn&#39;t want to unlock and then release the lockspace. This didn&#39;t take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released.</p> <p>To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks.</p> <p>As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.</p> https://vulnerability.circl.lu/vuln/cve-2024-38570