Lucene search

K
osvGoogleOSV:CVE-2024-46801
HistorySep 18, 2024 - 8:15 a.m.

CVE-2024-46801

2024-09-1808:15:06
Google
osv.dev
linux kernel
vulnerability
cve-2024-46801
libfs
get_stashed_dentry()
uaf issues

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.6%

In the Linux kernel, the following vulnerability has been resolved:

libfs: fix get_stashed_dentry()

get_stashed_dentry() tries to optimistically retrieve a stashed dentry
from a provided location. It needs to ensure to hold rcu lock before it
dereference the stashed location to prevent UAF issues. Use
rcu_dereference() instead of READ_ONCE() it’s effectively equivalent
with some lockdep bells and whistles and it communicates clearly that
this expects rcu protection.

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.6%

Related for OSV:CVE-2024-46801