CVE-2024-26764
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-26764
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26764.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-26764
- Downstream
- Related
- Published
- 2024-04-03T17:00:46.962Z
- Modified
- 2025-11-28T02:34:15.583808Z
- Summary
- fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fs/aio: Restrict kiocbsetcancel_fn() to I/O submitted via libaio
If kiocbsetcancelfn() is called for I/O submitted via iouring, the following kernel warning appears:
WARNING: CPU: 3 PID: 368 at fs/aio.c:598 kiocbsetcancelfn+0x9c/0xa8 Call trace: kiocbsetcancelfn+0x9c/0xa8 ffsepfilereaditer+0x144/0x1d0 ioread+0x19c/0x498 ioissuesqe+0x118/0x27c iosubmitsqes+0x25c/0x5fc _arm64sysiouringenter+0x104/0xab0 invokesyscall+0x58/0x11c el0svccommon+0xb4/0xf4 doel0svc+0x2c/0xb0 el0svc+0x2c/0xa4 el0t64synchandler+0x68/0xb4 el0t64sync+0x1a4/0x1a8
Fix this by setting the IOCBAIORW flag for read and write I/O that is submitted by libaio.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26764.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/18f614369def2a11a52f569fe0f910b199d13487
- https://git.kernel.org/stable/c/1dc7d74fe456944a9b1c57bd776280249f441ac6
- https://git.kernel.org/stable/c/337b543e274fe7a8f47df3c8293cc6686ffa620f
- https://git.kernel.org/stable/c/b4eea7a05ee0ab5ab0514421e6ba8c5d249cf942
- https://git.kernel.org/stable/c/b820de741ae48ccf50dd95e297889c286ff4f760
- https://git.kernel.org/stable/c/d7b6fa97ec894edd02f64b83e5e72e1aa352f353
- https://git.kernel.org/stable/c/e7e23fc5d5fe422827c9a43ecb579448f73876c7
- https://git.kernel.org/stable/c/ea1cd64d59f22d6d13f367d62ec6e27b9344695f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26764.json
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-26764
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed337b543e274fe7a8f47df3c8293cc6686ffa620fFixedb4eea7a05ee0ab5ab0514421e6ba8c5d249cf942Fixedea1cd64d59f22d6d13f367d62ec6e27b9344695fFixedd7b6fa97ec894edd02f64b83e5e72e1aa352f353Fixed18f614369def2a11a52f569fe0f910b199d13487Fixede7e23fc5d5fe422827c9a43ecb579448f73876c7Fixed1dc7d74fe456944a9b1c57bd776280249f441ac6Fixedb820de741ae48ccf50dd95e297889c286ff4f760
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed4.19.308
- Type
- ECOSYSTEM
- Events
-
Introduced4.20.0Fixed5.4.270
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.211
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.150
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.80
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.19
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.7.7