CVE-2024-50228

In the Linux kernel, the following vulnerability has been resolved: mm: shmem: fix data-race in shmemgetattr I got the following KCSAN report during syzbot testing: ================================================================== BUG: KCSAN: data-race in genericfillattr / inodesetctimecurrent...

CVE-2024-50228

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2024-50228

CVE-2024-50228 is a kernel vulnerability reported as a data-race in shmem_getattr() within the Linux mm/shmem subsystem. The issue arises when shmem_getattr() calls generic_fillattr() without proper inode locking, enabling a data race between inode fields during concurrent file attribute operatio...