CVE-2024-35815

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-35815
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35815.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-35815
Downstream
Related
Published
2024-05-17T14:15:16Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

fs/aio: Check IOCBAIORW before the struct aio_kiocb conversion

The first kiocbsetcancelfn() argument may point at a struct kiocb that is not embedded inside struct aiokiocb. With the current code, depending on the compiler, the req->kictx read happens either before the IOCBAIORW test or after that test. Move the req->kictx read such that it is guaranteed that the IOCBAIORW test happens first.

References

Affected packages