CVE-2024-41020

Summary

In the Linux kernel, the following vulnerability has been resolved:

filelock: Fix fcntl/close race recovery compat path

When I wrote commit 3cad1bc01041 ("filelock: Remove locks reliably when fcntl/close race is detected"), I missed that there are two copies of the code I was patching: The normal version, and the version for 64-bit offsets on 32-bit kernels. Thanks to Greg KH for stumbling over this while doing the stable backport…

Apply exactly the same fix to the compat path for 32-bit kernels.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < a561145f3ae973ebf3e0aee41624e92a6c5cb38daffected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < 4c43ad4ab41602201d34c66ac62130fe339d686faffected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < 911cc83e56a2de5a40758766c6a70d6998248860affected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < 53e21cfa68a7d12de378b7116c75571f73e0dfa2affected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < f4d0775c6e2f1340ca0725f0337de149aaa989caaffected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < 73ae349534ebc377328e7d21891e589626c6e82caffected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < 5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02affected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < ed898f9ca3fa32c56c858b463ceb9d9936cc69c4affected
LinuxLinuxc293621bbf678a3d85e3ed721c3921c8a670610d < f8138f2ad2f745b9a1c696a05b749eabe44337eaaffected
LinuxLinux2.6.13affected
LinuxLinux0 < 2.6.13unaffected
LinuxLinux4.19.319 <= 4.19.*unaffected
LinuxLinux5.4.281 <= 5.4.*unaffected
LinuxLinux5.10.223 <= 5.10.*unaffected
LinuxLinux5.15.164 <= 5.15.*unaffected
LinuxLinux6.1.102 <= 6.1.*unaffected
LinuxLinux6.6.43 <= 6.6.*unaffected
LinuxLinux6.9.12 <= 6.9.*unaffected
LinuxLinux6.10.2 <= 6.10.*unaffected
LinuxLinux6.11 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References