CVE-2024-53218: f2fs: fix race in concurrent f2fs_stop_gc_thread

Q: What is the severity of CVE-2024-53218?

CVE-2024-53218 has a moderate severity level as it involves a race condition that can lead to a general protection fault.

Q: What software versions are affected by CVE-2024-53218?

CVE-2024-53218 affects multiple versions of the Linux kernel, specifically versions up to 5.10.226-1 and 6.1.128-1.

Q: How do I fix CVE-2024-53218?

To resolve CVE-2024-53218, update the Linux kernel to version 6.12.12-1 or later.

Q: What is the nature of the issue in CVE-2024-53218?

CVE-2024-53218 involves a race condition in the f2fs filesystem during concurrent shutdown operations.

Q: Can CVE-2024-53218 lead to data loss?

While CVE-2024-53218 primarily results in a crash, it may indirectly lead to data loss if the system is improperly shut down during operations.

Published Dec 27, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix race in concurrent f2fsstopgcthread

In my test case, concurrent calls to f2fs shutdown report the following stack trace:

Oops: general protection fault, probably for non-canonical address 0xc6cfff63bb5513fc: 0000 [#1] PREEMPT SMP PTI CPU: 0 UID: 0 PID: 678 Comm: f2fsrepshutdo Not tainted 6.12.0-rc5-next-20241029-g6fb2fa9805c5-dirty #85 Call Trace: <TASK> ? showregs+0x8b/0xa0 ? diebody+0x26/0xa0 ? dieaddr+0x54/0x90 ? excgeneralprotection+0x24b/0x5c0 ? asmexcgeneralprotection+0x26/0x30 ? kthreadstop+0x46/0x390 f2fsstopgcthread+0x6c/0x110 f2fsdoshutdown+0x309/0x3a0 f2fsiocshutdown+0x150/0x1c0 f2fsioctl+0xffd/0x2ac0 f2fsioctl+0x76/0xe0 vfsioctl+0x23/0x60 x64sysioctl+0xce/0xf0 x64syscall+0x2b1b/0x4540 dosyscall64+0xa7/0x240 entrySYSCALL64afterhwframe+0x76/0x7e

The root cause is a race condition in f2fsstopgcthread() called from different f2fs shutdown paths:

[CPU0] [CPU1] ---------------------- ----------------------- f2fsstopgcthread f2fsstopgcthread gcth = sbi->gcthread gcth = sbi->gcthread kfree(gcth) sbi->gcthread = NULL < gcth != NULL > kthreadstop(gcth->f2fsgctask) //UAF

The commit c7f114d864ac ("f2fs: fix to avoid use-after-free in f2fsstopgcthread()") attempted to fix this issue by using a read semaphore to prevent races between shutdown and remount threads, but it fails to prevent all race conditions.

Fix it by converting to write lock of sumount in f2fsdoshutdown().

Other sources

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad

Affected Software

186 affected componentsFixes available

Linux Kernel

Linux Linux kernel>=4.16<6.6.64

Linux Linux kernel>=6.7<6.11.11

Linux Linux kernel>=6.12<6.12.2

debian/linux*

debian/linux<6.12.3-1

6.12.3-1

debian/linux<6.12.3-1

6.12.3-1

debian/linux<=6.1.176-1, <=6.1.190-1

6.12.107-16.12.115-27.2.12-17.2.15-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1153.163~18.04.1

5.4.0-1153.163~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1156.163~18.04.1

5.4.0-1156.163~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1156.165~18.04.1

5.4.0-1156.165~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-224.244~18.04.1

5.4.0-224.244~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1099.104~18.04.1

5.4.0-1099.104~18.04.1

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1151.161~18.04.1

5.4.0-1151.161~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1136.149~18.04.1

5.4.0-1136.149~18.04.1

ubuntu/linux<5.4.0-224.244

5.4.0-224.244

ubuntu/linux-aws<5.4.0-1153.163

5.4.0-1153.163

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.15<5.15.0-1098.105~20.04.1

5.15.0-1098.105~20.04.1

ubuntu/linux-aws-5.8*

ubuntu/linux-azure<5.4.0-1156.163

5.4.0-1156.163

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.15<5.15.0-1102.111~20.04.1

5.15.0-1102.111~20.04.1

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield<5.4.0-1112.119

5.4.0-1112.119

ubuntu/linux-gcp<5.4.0-1156.165

5.4.0-1156.165

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.15<5.15.0-1098.107~20.04.1

5.15.0-1098.107~20.04.1

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-164.174~20.04.1

5.15.0-164.174~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm<5.4.0-1099.104

5.4.0-1099.104

ubuntu/linux-ibm-5.15<5.15.0-1092.95~20.04.1

5.15.0-1092.95~20.04.1

ubuntu/linux-intel-5.13*

ubuntu/linux-intel-iotg-5.15<5.15.0-1093.99~20.04.1

5.15.0-1093.99~20.04.1

ubuntu/linux-iot<5.4.0-1057.60

5.4.0-1057.60

ubuntu/linux-kvm<5.4.0-1140.149

5.4.0-1140.149

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-164.174~20.04.1

5.15.0-164.174~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1050.50~20.04.1

5.15.0-1050.50~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle<5.4.0-1151.161

5.4.0-1151.161

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.15<5.15.0-1095.101~20.04.1

5.15.0-1095.101~20.04.1

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi<5.4.0-1136.149

5.4.0-1136.149

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.15<5.15.0-1093.97~20.04.2

5.15.0-1093.97~20.04.2

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp<5.4.0-1071.75

5.4.0-1071.75

ubuntu/linux-aws-fips<5.4.0-1153.163+fips1

5.4.0-1153.163+fips1

ubuntu/linux-azure-fips<5.4.0-1157.164+fips1

5.4.0-1157.164+fips1

ubuntu/linux-fips<5.4.0-1127.137

5.4.0-1127.137

ubuntu/linux-gcp-fips<5.4.0-1156.165+fips1

5.4.0-1156.165+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-164.174

5.15.0-164.174

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1098.105

5.15.0-1098.105

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1027.29~22.04.1

6.8.0-1027.29~22.04.1

ubuntu/linux-azure<5.15.0-1102.111

5.15.0-1102.111

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1027.32~22.04.1

6.8.0-1027.32~22.04.1

ubuntu/linux-azure-fde<5.15.0-1102.111.1

5.15.0-1102.111.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1098.107

5.15.0-1098.107

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1028.30~22.04.1

6.8.0-1028.30~22.04.1

ubuntu/linux-gke<5.15.0-1094.100

5.15.0-1094.100

ubuntu/linux-gkeop<5.15.0-1081.89

5.15.0-1081.89

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-58.60~22.04.1

6.8.0-58.60~22.04.1

ubuntu/linux-ibm<5.15.0-1092.95

5.15.0-1092.95

ubuntu/linux-ibm-6.8<6.8.0-1024.24~22.04.1

6.8.0-1024.24~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1093.99

5.15.0-1093.99

ubuntu/linux-kvm<5.15.0-1090.95

5.15.0-1090.95

ubuntu/linux-lowlatency<5.15.0-164.174

5.15.0-164.174

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-58.60.1~22.04.1

6.8.0-58.60.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1093.94

5.15.0-1093.94

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1026.29~22.04.1

6.8.0-1026.29~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1050.50

5.15.0-1050.50

ubuntu/linux-nvidia-tegra-igx<5.15.0-1039.39

5.15.0-1039.39

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1095.101

5.15.0-1095.101

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1024.25~22.04.1

6.8.0-1024.25~22.04.1

ubuntu/linux-raspi<5.15.0-1092.95

5.15.0-1092.95

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-58.60.1~22.04.1

6.8.0-58.60.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1062.66

5.15.0-1062.66

ubuntu/linux-bluefield<5.15.0-1082.84

5.15.0-1082.84

ubuntu/linux-intel-iot-realtime<5.15.0-1090.92

5.15.0-1090.92

ubuntu/linux-realtime<5.15.0-1097.106

5.15.0-1097.106

ubuntu/linux-realtime-6.8<6.8.1-1020.21~22.04.1

6.8.1-1020.21~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1098.105+fips1

5.15.0-1098.105+fips1

ubuntu/linux-azure-fips<5.15.0-1102.111+fips1

5.15.0-1102.111+fips1

ubuntu/linux-fips<5.15.0-164.174+fips1

5.15.0-164.174+fips1

ubuntu/linux-gcp-fips<5.15.0-1098.107+fips1

5.15.0-1098.107+fips1

ubuntu/linux<6.8.0-58.60

6.8.0-58.60

ubuntu/linux-aws<6.8.0-1027.29

6.8.0-1027.29

ubuntu/linux-azure<6.8.0-1027.32

6.8.0-1027.32

ubuntu/linux-azure-6.11<6.11.0-1012.12~24.04.1

6.11.0-1012.12~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1014.15

6.8.0-1014.15

ubuntu/linux-gcp<6.8.0-1028.30

6.8.0-1028.30

ubuntu/linux-gcp-6.11<6.11.0-1011.11~24.04.1

6.11.0-1011.11~24.04.1

ubuntu/linux-gke<6.8.0-1023.27

6.8.0-1023.27

ubuntu/linux-gkeop<6.8.0-1010.12

6.8.0-1010.12

ubuntu/linux-ibm<6.8.0-1024.24

6.8.0-1024.24

ubuntu/linux-lowlatency<6.8.0-58.60.1

6.8.0-58.60.1

ubuntu/linux-nvidia<6.8.0-1026.29

6.8.0-1026.29

ubuntu/linux-nvidia-6.11<6.11.0-1007.7

6.11.0-1007.7

ubuntu/linux-nvidia-lowlatency<6.8.0-1026.29.1

6.8.0-1026.29.1

ubuntu/linux-nvidia-tegra<6.8.0-1008.8

6.8.0-1008.8

ubuntu/linux-oem-6.11<6.11.0-1015.15

6.11.0-1015.15

ubuntu/linux-oem-6.8<6.8.0-1026.26

6.8.0-1026.26

ubuntu/linux-oracle<6.8.0-1024.25

6.8.0-1024.25

ubuntu/linux-raspi<6.8.0-1028.32

6.8.0-1028.32

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv<6.8.0-58.60.1

6.8.0-58.60.1

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2023.24

6.8.0-2023.24

ubuntu/linux-realtime<6.8.1-1020.21

6.8.1-1020.21

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.3-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.163~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-224.244~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.104~18.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.161~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.149~18.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-224.244
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.163
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.119
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.104
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.99~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1057.60
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.50~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.161
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1095.101~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.149
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.97~20.04.2
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1071.75
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1157.164+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.137
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.29~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.32~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1028.30~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1094.100
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.89
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-58.60~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.24~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.99
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1090.95
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-58.60.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.94
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1026.29~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.50
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1095.101
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.25~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-58.60.1~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.66
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1082.84
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1090.92
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1097.106
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1020.21~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-58.60
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.29
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.32
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1012.12~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1014.15
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1028.30
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1011.11~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1023.27
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1010.12
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.24
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-58.60.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1026.29
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1007.7
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1026.29.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.8
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1026.26
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.25
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1028.32
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.8.0-58.60.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2023.24
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1020.21
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Configuration
Convert the s_umount lock in f2fs_do_shutdown() to a write lock to prevent races during concurrent f2fs shutdown.
Linux kernel f2fs s_umount lock mode in f2fs_do_shutdown() = write lock

Event History

Dec 27, 2024

CVE Published

via MITRE·01:50 PM

Data Sourced

via MITRE·01:50 PM

Description

Data Sourced

via OSV·02:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-53218?

CVE-2024-53218 has a moderate severity level as it involves a race condition that can lead to a general protection fault.

What software versions are affected by CVE-2024-53218?