PT-2024-7846 · Linux+4 · Linux Kernel+4
Published
2024-03-26
·
Updated
2024-11-01
·
CVE-2024-27058
CVSS v3.1
4.7
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a race condition in the tmpfs component of the Linux kernel. A syzkaller reproducer found a race while attempting to remove dquot information from the rb tree. The
shmem release dquot() function may trigger a warning because it couldn't find a node in the tree when the real reason was the root node changing before the search starts. This occurs due to insufficient protection of the rb tree root node by the dqopt->dqio sem. The vulnerability can be exploited by an attacker to elevate privileges in the system.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu