Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987295 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986610 advisory. In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in...

PT-2025-49069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a race condition within the gdlm put lock function. Specifically, a small time window exists where the DFL UNMOUNT flag is set, but the lockspace has not yet be...

The vulnerability of the gfs2_scan_glock_lru() function in the fs/gfs2/glock.c module of the GFS2 file system support module for Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the gfs2scanglocklru function in the fs/gfs2/glock.c module of the GFS2 file system support in Linux’s operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2logflush In gfs2jindexfree, set sdp-sdjdesc to NULL under the log flush lock to provide exclusion against gfs2logflush. In gfs2logflush, check if sdp-sdjdesc is non-NULL before...

kernel: gfs2: Fix potential glock use-after-free on unmount

A vulnerability was found in the Linux kernel within the gfs2 component, where potential use-after-free issues could occur on unmount. When DLM lockspaces are released with remaining locks, callbacks for asynchronous lock contention may access freed objects, causing unexpected behavior...

gfs2: Fix potential glock use-after-free on unmount

...

CVE-2024-42079

CVE-2024-42079 is a Linux kernel vulnerability in the gfs2 subsystem that could lead to a NULL pointer dereference during log flush operations. The root cause is a race between outstanding glock work and unmount, which could cause gfs2_log_flush() to dereference a freed or NULL sdp->sd_jdesc. ...

CVE-2024-42079 gfs2: Fix NULL pointer dereference in gfs2_log_flush

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2logflush In gfs2jindexfree, set sdp-sdjdesc to NULL under the log flush lock to provide exclusion against gfs2logflush. In gfs2logflush, check if sdp-sdjdesc is non-NULL before...

SUSE CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

DEBIAN-CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

UBUNTU-CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior t...

SUSE CVE-2021-47254

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru to remove the glock from the lru list in gfs2glockput. On the shrink scan path, the same flag is cleared under...

CVE-2021-47254

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru to remove the glock from the lru list in gfs2glockput. On the shrink scan path, the same flag is cleared under...

DEBIAN-CVE-2021-47254

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru to remove the glock from the lru list in gfs2glockput. On the shrink scan path, the same flag is cleared under...

UBUNTU-CVE-2021-47254

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix use-after-free in gfs2glockshrinkscan The GLFLRU flag is checked under lrulock in gfs2glockremovefromlru to remove the glock from the lru list in gfs2glockput. On the shrink scan path, the same flag is cleared under...

glock-web.de Improper Access Control vulnerability OBB-3774869

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...