In the Linux kernel, the following vulnerability has been resolved:
ocfs2: cancel dqisyncwork before freeing oinfo
ocfs2globalreadinfo() will initialize and schedule dqisyncwork at the end, if error occurs after successfully reading global quota, it will trigger the following warning with CONFIGDEBUGOBJECTS* enabled:
ODEBUG: free active (active state 0) object: 00000000d8b0ce28 object type: timerlist hint: qsyncwork_fn+0x0/0x16c
This reports that there is an active delayed work when freeing oinfo in error handling, so cancel dqisyncwork first. BTW, return status instead of -1 when .readfileinfo fails.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49966.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49966.json"
[
{
"signature_version": "v1",
"target": {
"file": "fs/ocfs2/quota_local.c",
"function": "ocfs2_local_read_info"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a4346c04d055bf7e184c18a73dbd23b6a9811118",
"deprecated": false,
"digest": {
"function_hash": "234637155930553839728257893924148056658",
"length": 2189.0
},
"id": "CVE-2024-49966-b9387860",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "fs/ocfs2/quota_local.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a4346c04d055bf7e184c18a73dbd23b6a9811118",
"deprecated": false,
"digest": {
"line_hashes": [
"94763263020017718869536534727507950484",
"336249039759473872582072997334900792744",
"103270326524155597405760333496738562705",
"148180278989404200937280967737234228261",
"314833106178952725850932454959924633354",
"108256705021106606298023720466768574114",
"289060851722319958812769555973959852045",
"276676544461954258234907957314699864241",
"34395089922006127653547130214377705302",
"26223385611487013524729146585185540926",
"249089915807967510557755741637415324473",
"331055568412015676749559949644902274371",
"126601879072399667390672882997167990446",
"210396107082959251769695679084890731694",
"235474030368592158602498041866280496671",
"194791144591503853903918588432404577117",
"109299867216250087485593076659919177174",
"106746680142702416296335960954948213714",
"166151542114441598424896064248868787130",
"200403003820086126673543804054341861589"
],
"threshold": 0.9
},
"id": "CVE-2024-49966-ff86a955",
"signature_type": "Line"
}
]