AZL-42246
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42246.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-42246
- Upstream
- Published
- 2024-05-21T16:15:15Z
- Modified
- 2026-04-01T05:14:32.157637Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- CVE-2023-52760 affecting package kernel for versions less than 5.15.167.1-2
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix slab-use-after-free in gfs2qddealloc
In gfs2putsuper(), whether withdrawn or not, the quota should be cleaned up by gfs2quotacleanup().
Otherwise, struct gfs2sbd will be freed before gfs2qddealloc (rcu callback) has run for all gfs2quota_data objects, resulting in use-after-free.
Also, gfs2destroythreads() and gfs2quotacleanup() is already called by gfs2makefsro(), so in gfs2putsuper(), after calling gfs2makefsro(), there is no need to call them again.
- References