ghsa-mcf7-h35p-c29h
Vulnerability from github
Published
2024-05-19 09:34
Modified
2024-05-19 09:34
Details
In the Linux kernel, the following vulnerability has been resolved:
aio: Fix null ptr deref in aio_complete() wakeup
list_del_init_careful() needs to be the last access to the wait queue entry - it effectively unlocks access.
Previously, finish_wait() would see the empty list head and skip taking the lock, and then we'd return - but the completion path would still attempt to do the wakeup after the task_struct pointer had been overwritten.
{
"affected": [],
"aliases": [
"CVE-2024-35874"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-19T09:15:08Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\naio: Fix null ptr deref in aio_complete() wakeup\n\nlist_del_init_careful() needs to be the last access to the wait queue\nentry - it effectively unlocks access.\n\nPreviously, finish_wait() would see the empty list head and skip taking\nthe lock, and then we\u0027d return - but the completion path would still\nattempt to do the wakeup after the task_struct pointer had been\noverwritten.",
"id": "GHSA-mcf7-h35p-c29h",
"modified": "2024-05-19T09:34:46Z",
"published": "2024-05-19T09:34:46Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35874"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/9678bcc6234d83759fe091c197f5017a32b468da"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/caeb4b0a11b3393e43f7fa8e0a5a18462acc66bd"
}
],
"schema_version": "1.4.0",
"severity": []
}
Loading...