CVE-2024-49966: ocfs2: cancel dqi_sync_work before freeing oinfo
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: cancel dqisyncwork before freeing oinfo
ocfs2globalreadinfo() will initialize and schedule dqisyncwork at the end, if error occurs after successfully reading global quota, it will trigger the following warning with CONFIGDEBUGOBJECTS enabled:
ODEBUG: free active (active state 0) object: 00000000d8b0ce28 object type: timerlist hint: qsyncworkfn+0x0/0x16c
This reports that there is an active delayed work when freeing oinfo in error handling, so cancel dqisyncwork first. BTW, return status instead of -1 when .readfileinfo fails.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49966?
The severity of CVE-2024-49966 has not been explicitly rated, but it affects the Linux kernel's functionality.
How do I fix CVE-2024-49966?
To fix CVE-2024-49966, update the Linux kernel to the patched versions mentioned in the advisory.
What versions of the Linux kernel are affected by CVE-2024-49966?
CVE-2024-49966 affects multiple Linux kernel versions ranging from 2.6.29 to 6.11.
Is CVE-2024-49966 related to ocfs2 functionality?
Yes, CVE-2024-49966 is related to the ocfs2 functionality within the Linux kernel.
Can I circumvent CVE-2024-49966?
Circumventing CVE-2024-49966 is not recommended; applying the appropriate kernel update is the advised approach.