CVE-2024-47691: f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()

Published Oct 21, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid use-after-free in f2fsstopgcthread()

syzbot reports a f2fs bug as below:

dumpstack lib/dumpstack.c:88 [inline] dumpstacklvl+0x241/0x360 lib/dumpstack.c:114 printreport+0xe8/0x550 mm/kasan/report.c:491 kasanreport+0x143/0x180 mm/kasan/report.c:601 kasancheckrange+0x282/0x290 mm/kasan/generic.c:189 instrumentatomicreadwrite include/linux/instrumented.h:96 [inline] atomicfetchaddrelaxed include/linux/atomic/atomic-instrumented.h:252 [inline] refcountadd include/linux/refcount.h:184 [inline] refcountinc include/linux/refcount.h:241 [inline] refcountinc include/linux/refcount.h:258 [inline] gettaskstruct include/linux/sched/task.h:118 [inline] kthreadstop+0xca/0x630 kernel/kthread.c:704 f2fsstopgcthread+0x65/0xb0 fs/f2fs/gc.c:210 f2fsdoshutdown+0x192/0x540 fs/f2fs/file.c:2283 f2fsiocshutdown fs/f2fs/file.c:2325 [inline] f2fsioctl+0x443a/0xbe60 fs/f2fs/file.c:4325 vfsioctl fs/ioctl.c:51 [inline] dosysioctl fs/ioctl.c:907 [inline] sesysioctl+0xfc/0x170 fs/ioctl.c:893 dosyscallx64 arch/x86/entry/common.c:52 [inline] dosyscall64+0xf3/0x230 arch/x86/entry/common.c:83 entrySYSCALL64afterhwframe+0x77/0x7f

The root cause is below race condition, it may cause use-after-free issue in sbi->gcth pointer.

- remount - f2fsremount - f2fsstopgcthread - kfree(gcth) - f2fsiocshutdown - f2fsdoshutdown - f2fsstopgcthread - kthreadstop(gcth->f2fsgctask) : sbi->gcthread = NULL;

We will call f2fsdoshutdown() in two paths: - for f2fsiocshutdown() path, we should grab sb->sumount semaphore for fixing. - for f2fsshutdown() path, it's safe since caller has already grabbed sb->sumount semaphore.

Other sources

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad

Affected Software

183 affected componentsFixes available

Linux Linux kernel>=4.16<6.6.54

Linux Linux kernel>=6.7<6.10.13

Linux Linux kernel>=6.11<6.11.2

debian/linux*

debian/linux<6.11.2-1

6.11.2-1

debian/linux<6.11.2-1

6.11.2-1

debian/linux<=6.1.176-1, <=6.1.190-1

6.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1153.163~18.04.1

5.4.0-1153.163~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1156.163~18.04.1

5.4.0-1156.163~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1156.165~18.04.1

5.4.0-1156.165~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-224.244~18.04.1

5.4.0-224.244~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1099.104~18.04.1

5.4.0-1099.104~18.04.1

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1151.161~18.04.1

5.4.0-1151.161~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1136.149~18.04.1

5.4.0-1136.149~18.04.1

ubuntu/linux<5.4.0-224.244

5.4.0-224.244

ubuntu/linux-aws<5.4.0-1153.163

5.4.0-1153.163

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.15<5.15.0-1098.105~20.04.1

5.15.0-1098.105~20.04.1

ubuntu/linux-aws-5.8*

ubuntu/linux-azure<5.4.0-1156.163

5.4.0-1156.163

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.15<5.15.0-1102.111~20.04.1

5.15.0-1102.111~20.04.1

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield<5.4.0-1112.119

5.4.0-1112.119

ubuntu/linux-gcp<5.4.0-1156.165

5.4.0-1156.165

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.15<5.15.0-1098.107~20.04.1

5.15.0-1098.107~20.04.1

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-164.174~20.04.1

5.15.0-164.174~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm<5.4.0-1099.104

5.4.0-1099.104

ubuntu/linux-ibm-5.15<5.15.0-1092.95~20.04.1

5.15.0-1092.95~20.04.1

ubuntu/linux-intel-5.13*

ubuntu/linux-intel-iotg-5.15<5.15.0-1093.99~20.04.1

5.15.0-1093.99~20.04.1

ubuntu/linux-iot<5.4.0-1057.60

5.4.0-1057.60

ubuntu/linux-kvm<5.4.0-1140.149

5.4.0-1140.149

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-164.174~20.04.1

5.15.0-164.174~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1050.50~20.04.1

5.15.0-1050.50~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle<5.4.0-1151.161

5.4.0-1151.161

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.15<5.15.0-1095.101~20.04.1

5.15.0-1095.101~20.04.1

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi<5.4.0-1136.149

5.4.0-1136.149

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.15<5.15.0-1093.97~20.04.2

5.15.0-1093.97~20.04.2

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp<5.4.0-1071.75

5.4.0-1071.75

ubuntu/linux-aws-fips<5.4.0-1153.163+fips1

5.4.0-1153.163+fips1

ubuntu/linux-azure-fips<5.4.0-1157.164+fips1

5.4.0-1157.164+fips1

ubuntu/linux-fips<5.4.0-1127.137

5.4.0-1127.137

ubuntu/linux-gcp-fips<5.4.0-1156.165+fips1

5.4.0-1156.165+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-164.174

5.15.0-164.174

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1098.105

5.15.0-1098.105

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1023.25~22.04.1

6.8.0-1023.25~22.04.1

ubuntu/linux-azure<5.15.0-1102.111

5.15.0-1102.111

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1025.30~22.04.1

6.8.0-1025.30~22.04.1

ubuntu/linux-azure-fde<5.15.0-1102.111.1

5.15.0-1102.111.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1098.107

5.15.0-1098.107

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1024.26~22.04.1

6.8.0-1024.26~22.04.1

ubuntu/linux-gke<5.15.0-1094.100

5.15.0-1094.100

ubuntu/linux-gkeop<5.15.0-1081.89

5.15.0-1081.89

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-57.59~22.04.1

6.8.0-57.59~22.04.1

ubuntu/linux-ibm<5.15.0-1092.95

5.15.0-1092.95

ubuntu/linux-ibm-6.8<6.8.0-1023.23~22.04.1

6.8.0-1023.23~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1093.99

5.15.0-1093.99

ubuntu/linux-kvm<5.15.0-1090.95

5.15.0-1090.95

ubuntu/linux-lowlatency<5.15.0-164.174

5.15.0-164.174

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-54.56.1~22.04.1

6.8.0-54.56.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1093.94

5.15.0-1093.94

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1022.25~22.04.2

6.8.0-1022.25~22.04.2

ubuntu/linux-nvidia-tegra<5.15.0-1050.50

5.15.0-1050.50

ubuntu/linux-nvidia-tegra-igx<5.15.0-1039.39

5.15.0-1039.39

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1095.101

5.15.0-1095.101

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1020.21~22.04.1

6.8.0-1020.21~22.04.1

ubuntu/linux-raspi<5.15.0-1092.95

5.15.0-1092.95

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-53.55.1~22.04.1

6.8.0-53.55.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1062.66

5.15.0-1062.66

ubuntu/linux-bluefield<5.15.0-1082.84

5.15.0-1082.84

ubuntu/linux-intel-iot-realtime<5.15.0-1090.92

5.15.0-1090.92

ubuntu/linux-realtime<5.15.0-1097.106

5.15.0-1097.106

ubuntu/linux-realtime-6.8<6.8.1-1016.17~22.04.1

6.8.1-1016.17~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1098.105+fips1

5.15.0-1098.105+fips1

ubuntu/linux-azure-fips<5.15.0-1102.111+fips1

5.15.0-1102.111+fips1

ubuntu/linux-fips<5.15.0-164.174+fips1

5.15.0-164.174+fips1

ubuntu/linux-gcp-fips<5.15.0-1098.107+fips1

5.15.0-1098.107+fips1

ubuntu/linux<6.8.0-54.56

6.8.0-54.56

ubuntu/linux-aws<6.8.0-1023.25

6.8.0-1023.25

ubuntu/linux-azure<6.8.0-1025.30

6.8.0-1025.30

ubuntu/linux-azure-6.11<6.11.0-1012.12~24.04.1

6.11.0-1012.12~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1014.15

6.8.0-1014.15

ubuntu/linux-gcp<6.8.0-1024.26

6.8.0-1024.26

ubuntu/linux-gcp-6.11<6.11.0-1011.11~24.04.1

6.11.0-1011.11~24.04.1

ubuntu/linux-gke<6.8.0-1019.23

6.8.0-1019.23

ubuntu/linux-gkeop<6.8.0-1006.8

6.8.0-1006.8

ubuntu/linux-ibm<6.8.0-1022.22

6.8.0-1022.22

ubuntu/linux-lowlatency<6.8.0-54.56.1

6.8.0-54.56.1

ubuntu/linux-nvidia<6.8.0-1022.25

6.8.0-1022.25

ubuntu/linux-nvidia-6.11<6.11.0-1007.7

6.11.0-1007.7

ubuntu/linux-nvidia-lowlatency<6.8.0-1022.25.2

6.8.0-1022.25.2

ubuntu/linux-oem-6.11<6.11.0-1015.15

6.11.0-1015.15

ubuntu/linux-oem-6.8<6.8.0-1024.24

6.8.0-1024.24

ubuntu/linux-oracle<6.8.0-1020.21

6.8.0-1020.21

ubuntu/linux-raspi<6.8.0-1019.23

6.8.0-1019.23

ubuntu/linux-realtime*

ubuntu/linux-riscv<6.8.0-53.55.1

6.8.0-53.55.1

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2018.19

6.8.0-2018.19

ubuntu/linux-realtime<6.8.1-1016.17

6.8.1-1016.17

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.11.2-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.163~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-224.244~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.104~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.161~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.149~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-224.244
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.163
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.119
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.104
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.99~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1057.60
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.50~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.161
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1095.101~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.149
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.97~20.04.2
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1071.75
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1157.164+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.137
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.25~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1025.30~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.26~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1094.100
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.89
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-57.59~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.23~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.99
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1090.95
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-54.56.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.94
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.25~22.04.2
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.50
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1095.101
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.21~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-53.55.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.66
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1082.84
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1090.92
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1097.106
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1016.17~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-54.56
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.25
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1025.30
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1012.12~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1014.15
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.26
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1011.11~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.23
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1006.8
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.22
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-54.56.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.25
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1007.7
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.25.2
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.24
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1020.21
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.23
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-53.55.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2018.19
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1016.17
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Compensating control
In the f2fs_ioc_shutdown() path, acquire the sb->s_umount semaphore before calling f2fs_do_shutdown(); ensure f2fs_stop_gc_thread() stops gc_th->f2fs_gc_task before kfree(gc_th) and sets sbi->gc_thread = NULL to prevent use-after-free.

Event History

Oct 21, 2024

CVE Published

via MITRE·11:53 AM

Data Sourced

via MITRE·11:53 AM

Description

Data Sourced

via OSV·12:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-47691?

The severity of CVE-2024-47691 is rated as high due to its impact on the Linux kernel's stability.

How do I fix CVE-2024-47691?

To fix CVE-2024-47691, you should update your Linux kernel to a version that includes the patch for this vulnerability.

Which versions are affected by CVE-2024-47691?

CVE-2024-47691 affects Linux kernel versions between 4.16 and 6.6.54, as well as versions from 6.7 to 6.10.13 and 6.11 to 6.11.2.

Is CVE-2024-47691 a use-after-free vulnerability?

Yes, CVE-2024-47691 is identified as a use-after-free vulnerability in f2fs related to f2fs_stop_gc_thread().

What components are impacted by CVE-2024-47691?

CVE-2024-47691 impacts the f2fs (Flash-Friendly File System) component of the Linux kernel.