high
7.8
CWE
416
Advisory Published
Updated

CVE-2024-57892: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv

First published: Wed Jan 15 2025(Updated: )

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quota_getnextquota. Specifically, sb_dqinfo(sb, type)->dqi_priv is the dangling pointer. During the remounting process, the pointer dqi_priv is freed but is never set as null leaving it to be accessed. Additionally, the read-only option for remounting sets the DQUOT_SUSPENDED flag instead of setting the DQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the next quota, the function ocfs2_get_next_id is called and only checks the quota usage flags and not the quota suspended flags. To fix this, I set dqi_priv to null when it is freed after remounting with read-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id. [akpm@linux-foundation.org: coding-style cleanups]

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected SoftwareAffected VersionHow to fix
Red Hat Kernel-devel
Linux Kernel>=4.6<6.1.125
Linux Kernel>=6.2<6.6.70
Linux Kernel>=6.7<6.12.9
Linux Kernel=6.13-rc1
Linux Kernel=6.13-rc2
Linux Kernel=6.13-rc3
Linux Kernel=6.13-rc4
Linux Kernel=6.13-rc5
debian/linux<=5.10.223-1
5.10.234-1
6.1.129-1
6.1.128-1
6.12.20-1
6.12.21-1
debian/linux-6.1
6.1.129-1~deb11u1

Remedy

https://git.kernel.org/stable/c/2d431192486367eee03cc28d0b53b97dafcb8e63

Remedy

https://git.kernel.org/stable/c/2e3d203b1adede46bbba049e497765d67865be18

Remedy

https://git.kernel.org/stable/c/5f3fd772d152229d94602bca243fbb658068a597

Remedy

https://git.kernel.org/stable/c/ba950a02d8d23811aa1120affd3adedcfac6153d

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2024-57892?

    CVE-2024-57892 has a high severity due to potential exploitation leading to memory corruption.

  • How do I fix CVE-2024-57892?

    To mitigate CVE-2024-57892, update the Linux kernel to a version that includes the patch for this vulnerability.

  • Which Linux kernel versions are affected by CVE-2024-57892?

    CVE-2024-57892 affects Linux kernel versions from 4.6 up to 6.1.125 and between 6.2 and 6.6.70.

  • What component is impacted by CVE-2024-57892?

    CVE-2024-57892 impacts the ocfs2 filesystem within the Linux kernel.

  • Is CVE-2024-57892 exploitable remotely?

    CVE-2024-57892 may be exploitable locally when specific user operations are performed on the ocfs2 filesystem.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203