CVE-2024-41020

Katalog CVE

CVSS 4.7 · Medium EPSS 0,19%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: filelock: Fix fcntl/close race recovery compat path When I wrote commit 3cad1bc01041 ("filelock: Remove locks reliably when fcntl/close race is detected"), I missed that there are two copies of the code I was patching: The normal version, and the version for 64-bit offsets on 32-bit kernels. Thanks to Greg KH for stumbling over this while doing the stable backport... Apply exactly the same fix to the compat path for 32-bit kernels.

Rincian

Terbit di NVD

29 Juli 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/4c43ad4ab41602201d34c66ac62130fe339d686f patch
• https://git.kernel.org/stable/c/53e21cfa68a7d12de378b7116c75571f73e0dfa2 patch
• https://git.kernel.org/stable/c/5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02 patch
• https://git.kernel.org/stable/c/73ae349534ebc377328e7d21891e589626c6e82c patch
• https://git.kernel.org/stable/c/911cc83e56a2de5a40758766c6a70d6998248860 patch
• https://git.kernel.org/stable/c/a561145f3ae973ebf3e0aee41624e92a6c5cb38d patch
• https://git.kernel.org/stable/c/ed898f9ca3fa32c56c858b463ceb9d9936cc69c4 patch
• https://git.kernel.org/stable/c/f4d0775c6e2f1340ca0725f0337de149aaa989ca patch
• https://git.kernel.org/stable/c/f8138f2ad2f745b9a1c696a05b749eabe44337ea patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html