CVE-2021-47088

2024-03-0418:15:07

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

vulnerability

dbgfs

kdamond_lock

use_after_free

bug

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/dbgfs: protect targets destructions with kdamond_lock

DAMON debugfs interface iterates current monitoring targets in
‘dbgfs_target_ids_read()’ while holding the corresponding
‘kdamond_lock’. However, it also destructs the monitoring targets in
‘dbgfs_before_terminate()’ without holding the lock. This can result in
a use_after_free bug. This commit avoids the race by protecting the
destruction with the corresponding ‘kdamond_lock’.