CVE-2025-40242

The CVE-2025-40242 entry concerns the Linux kernel GFS2 path: gdlm_put_lock() has a small window after DFL_UNMOUNT is set but before the lockspace is released, during which the distributed lock manager (dlm) may still call gdlm_ast()/gdlm_bast(). The consequence could be dereferencing freed glock...

Linux Distros Unpatched Vulnerability : CVE-2025-40242

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: Fix unlikely race in gdlmputlock In gdlmputlock, there is a small window of time in which the DFLUNMOUNT flag has been set but the lockspace hasn't been...

Siemens SIMATIC S7-1500 NULL Pointer Dereference (CVE-2023-3212)

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a...

OESA-2025-2636 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990510 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes i...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989576)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989576 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989553 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space wh...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989383)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989383 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed inline inodes i...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989024)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989024 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990221)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990221 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Truncate address space when flipping GFS2DIFJDATA flag Truncate an inode's address space wh...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: gfs2: Validating idepth for exhash directories A fuzzer test introduced corruption where the depth of the directory reached 0 in direread. This caused an undefined shift of 32 in the following line: index = hash 32 - dip-idepth; ...

SUSE-SU-2025:3761-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2022-50233: Bluetooth: eir: Fix using strlen with...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:03615-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03615-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: ...

SUSE-SU-2025:03615-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49138: Bluetooth: hcievent: Fix checking conn for leconncompleteevt bsc1238160. - CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev-devname,shortna...

Linux Distros Unpatched Vulnerability : CVE-2023-53622

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in...

SUSE CVE-2023-53622

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...

CVE-2023-53622

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...

UBUNTU-CVE-2023-53622

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...

EUVD-2025-32806

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2showoptions Some fields such as gtlogdsecs of the struct gfs2tune are accessed without holding the lock gtspin in gfs2showoptions: val = sdp-sdtune.gtlogdsecs; if val != 30 seqprintfs,...

CVE-2023-53622

Summary of CVE-2023-53622 (Linux kernel, gfs2): A data race can occur in gfs2_show_options() when accessing fields of gfs2_tune (eg, gt_logd_secs) without holding the gt_spin lock, allowing concurrent execution with gfs2_reconfigure() to race. The fix acquires the lock (sdp->sd_tune.gt_spin) b...