PT-2024-32157 · Linux+3 · Linux Kernel+3
Andreas Jahn
+1
·
Published
2024-09-03
·
Updated
2025-02-06
·
CVE-2024-46734
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.52
Description
A race condition exists in the Linux kernel's btrfs file system when using the same file descriptor for direct IO writes and fsync operations. This can lead to either an attempt to perform fsync without holding the inode's lock, triggering assertion failures, or an invalid memory access from the fsync task due to the file private pointing to memory allocated on the stack by the direct IO task. The issue occurs when two threads are using the same file descriptor, one for direct IO writes and the other for fsync, and can result in a kernel bug or invalid opcode error.
Recommendations
To resolve this issue, update the Linux kernel to version 6.6.52 or later. This update fixes the race condition between direct IO write and fsync when using the same file descriptor, preventing potential kernel bugs or invalid opcode errors.
Exploit
Fix
Improper Locking
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse