CVE-2024-35815: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
In the Linux kernel, the following vulnerability has been resolved:
fs/aio: Check IOCBAIORW before the struct aiokiocb conversion
The first kiocbsetcancelfn() argument may point at a struct kiocb that is not embedded inside struct aiokiocb. With the current code, depending on the compiler, the req->kictx read happens either before the IOCBAIORW test or after that test. Move the req->kictx read such that it is guaranteed that the IOCBAIORW test happens first.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35815?
CVE-2024-35815 has been classified with a severity level that indicates it may be exploited to cause unintended behavior in the Linux kernel.
How do I fix CVE-2024-35815?
To address CVE-2024-35815, users should update to the patched versions of the Linux kernel: 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2024-35815?
CVE-2024-35815 affects systems running specific versions of the Linux kernel, particularly those listed in the affected software details.
Can I confirm if CVE-2024-35815 has been exploited?
As of now, there are no public reports confirming active exploitation of CVE-2024-35815 in the wild.
Is CVE-2024-35815 specific to certain distributions of Linux?
CVE-2024-35815 primarily affects Debian-based distributions that utilize impacted versions of the Linux kernel.