CVSS 7.8 · High EPSS 0,27%
Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfs_release_seqid() in nfs4_opendata_free() can result in a use-after-free of the pointer to the defunct rpc task of the other thread. The fix is to ensure that if the RPC call is aborted before the call to nfs_wait_on_sequence() is complete, then we must call nfs_release_seqid() in nfs4_open_release() before the rpc_task is freed.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 2.6.16 hingga sebelum 4.19.325 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.287 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.231 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.174 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.120 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.64 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.11.11 |
| linux | linux kernel | Versi 6.12 hingga sebelum 6.12.2 |