https://vulnerability.circl.lu/sightings/feed 2026-05-05T14:27:33.681298+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b70951ce-1972-427a-8098-7e43451a5ab6/export 2026-05-05T14:27:34.021044+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "b70951ce-1972-427a-8098-7e43451a5ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42300", "type": "seen", "source": "https://t.me/cvedetector/3408", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-42300 - Alibaba Cloud ECS Erofs Kernel Race Condition Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-42300 \nPublished : Aug. 17, 2024, 9:15 a.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved: \n \nerofs: fix race in z_erofs_get_gbuf() \n \nIn z_erofs_get_gbuf(), the current task may be migrated to another \nCPU between `z_erofs_gbuf_id()` and `spin_lock(&gbuf->lock)`. \n \nTherefore, z_erofs_put_gbuf() will trigger the following issue \nwhich was found by stress test: \n \n[772156.434168] kernel BUG at fs/erofs/zutil.c:58! \n.. \n[772156.435007] \n[772156.439237] CPU: 0 PID: 3078 Comm: stress Kdump: loaded Tainted: G E 6.10.0-rc7+ #2 \n[772156.439239] Hardware name: Alibaba Cloud Alibaba Cloud ECS, BIOS 1.0.0 01/01/2017 \n[772156.439241] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) \n[772156.439243] pc : z_erofs_put_gbuf+0x64/0x70 [erofs] \n[772156.439252] lr : z_erofs_lz4_decompress+0x600/0x6a0 [erofs] \n.. \n[772156.445958] stress (3127): drop_caches: 1 \n[772156.446120] Call trace: \n[772156.446121] z_erofs_put_gbuf+0x64/0x70 [erofs] \n[772156.446761] z_erofs_lz4_decompress+0x600/0x6a0 [erofs] \n[772156.446897] z_erofs_decompress_queue+0x740/0xa10 [erofs] \n[772156.447036] z_erofs_runqueue+0x428/0x8c0 [erofs] \n[772156.447160] z_erofs_readahead+0x224/0x390 [erofs] \n.. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"17 Aug 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-17T12:18:49.000000Z"} 2024-08-17T12:18:49+00:00