CVE-2024-41020
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-41020
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41020.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-41020
- Downstream
- Related
- Published
- 2024-07-29T13:34:21.617Z
- Modified
- 2025-11-28T02:35:13.691115Z
- Summary
- filelock: Fix fcntl/close race recovery compat path
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
filelock: Fix fcntl/close race recovery compat path
When I wrote commit 3cad1bc01041 ("filelock: Remove locks reliably when fcntl/close race is detected"), I missed that there are two copies of the code I was patching: The normal version, and the version for 64-bit offsets on 32-bit kernels. Thanks to Greg KH for stumbling over this while doing the stable backport...
Apply exactly the same fix to the compat path for 32-bit kernels.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41020.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/4c43ad4ab41602201d34c66ac62130fe339d686f
- https://git.kernel.org/stable/c/53e21cfa68a7d12de378b7116c75571f73e0dfa2
- https://git.kernel.org/stable/c/5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02
- https://git.kernel.org/stable/c/73ae349534ebc377328e7d21891e589626c6e82c
- https://git.kernel.org/stable/c/911cc83e56a2de5a40758766c6a70d6998248860
- https://git.kernel.org/stable/c/a561145f3ae973ebf3e0aee41624e92a6c5cb38d
- https://git.kernel.org/stable/c/ed898f9ca3fa32c56c858b463ceb9d9936cc69c4
- https://git.kernel.org/stable/c/f4d0775c6e2f1340ca0725f0337de149aaa989ca
- https://git.kernel.org/stable/c/f8138f2ad2f745b9a1c696a05b749eabe44337ea
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41020.json
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-41020
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc293621bbf678a3d85e3ed721c3921c8a670610dFixeda561145f3ae973ebf3e0aee41624e92a6c5cb38dFixed4c43ad4ab41602201d34c66ac62130fe339d686fFixed911cc83e56a2de5a40758766c6a70d6998248860Fixed53e21cfa68a7d12de378b7116c75571f73e0dfa2Fixedf4d0775c6e2f1340ca0725f0337de149aaa989caFixed73ae349534ebc377328e7d21891e589626c6e82cFixed5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02Fixeded898f9ca3fa32c56c858b463ceb9d9936cc69c4Fixedf8138f2ad2f745b9a1c696a05b749eabe44337ea
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced2.6.13Fixed4.19.319
- Type
- ECOSYSTEM
- Events
-
Introduced4.20.0Fixed5.4.281
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.223
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.164
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.102
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.43
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.9.12
- Type
- ECOSYSTEM
- Events
-
Introduced6.10.0Fixed6.10.2