2 matches found
CVE-2022-49337
In the Linux kernel OCFS2 code, CVE-2022-49337 relates to dlmfs user_dlm_destroy_lock: on failure, flags like USER_LOCK_IN_TEARDOWN and USER_LOCK_BUSY may not be cleared, causing a use-after-free risk and a kernel panic during unlink. The fix reverts USER_LOCK_IN_TEARDOWN on failure and ensures e...
CVE-2022-49337
In the Linux kernel, the following vulnerability has been resolved: ocfs2: dlmfs: fix error handling of userdlmdestroylock When userdlmdestroylock failed, it didn't clean up the flags it set before exit. For USERLOCKINTEARDOWN, if this function fails because of lock is still in used, next time wh...