CVE-2024-42250
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-42250
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-42250.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-42250
- Downstream
- Related
- Published
- 2024-08-07T15:14:33Z
- Modified
- 2025-10-22T01:26:41.973777Z
- Summary
- cachefiles: add missing lock protection when polling
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
cachefiles: add missing lock protection when polling
Add missing lock protection in poll routine when iterating xarray, otherwise:
Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefilesreq) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefilesreq accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/6bb6bd3dd6f382dfd36220d4b210a0c77c066651
- https://git.kernel.org/stable/c/8eadcab7f3dd809edbe5ae20533ff843dfea3a07
- https://git.kernel.org/stable/c/97cfd5e20ddc2e33e16ce369626ce76c9a475fd7
- https://git.kernel.org/stable/c/cf5bb09e742a9cf6349127e868329a8f69b7a014
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced0e19a18f998dcabe8be590e0b39660a1f230209bFixed97cfd5e20ddc2e33e16ce369626ce76c9a475fd7
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced18943864342705fa18dd4e6b8d608491fec81f6eFixed6bb6bd3dd6f382dfd36220d4b210a0c77c066651
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb817e22b2e91257ace32a6768c3c003faeaa1c5cFixed8eadcab7f3dd809edbe5ae20533ff843dfea3a07
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb817e22b2e91257ace32a6768c3c003faeaa1c5cFixedcf5bb09e742a9cf6349127e868329a8f69b7a014