Ubuntu.comUB:CVE-2021-47254CVE-2021-47254
In the Linux kernel, the following vulnerability has been resolved: gfs2:
Fix use-after-free in gfs2_glock_shrink_scan The GLF_LRU flag is checked
under lru_lock in gfs2_glock_remove_from_lru() to remove the glock from the
lru list in __gfs2_glock_put(). On the shrink scan path, the same flag is
cleared under lru_lock but because of cond_resched_lock(&lru_lock) in
gfs2_dispose_glock_lru(), progress on the put side can be made without
deleting the glock from the lru list. Keep GLF_LRU across the race window
opened by cond_resched_lock(&lru_lock) to ensure correct behavior on both
sides - clear GLF_LRU after list_del under lru_lock.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-aws | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-aws-5.4 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-aws-hwe | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | linux-azure | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | linux-azure-4.15 | < any | UNKNOWN |
References
git.kernel.org/linus/1ab19c5de4c537ec0d9b21020395a5b5a6c059b2 (5.13-rc5)
git.kernel.org/stable/c/0364742decb0f02bc183404868b82896f7992595
git.kernel.org/stable/c/094bf5670e762afa243d2c41a5c4ab71c7447bf4
git.kernel.org/stable/c/1ab19c5de4c537ec0d9b21020395a5b5a6c059b2
git.kernel.org/stable/c/38ce329534500bf4ae71f81df6a37a406cf187b4
git.kernel.org/stable/c/86fd5b27db743a0ce0cc245e3a34813b2aa6ec1d
git.kernel.org/stable/c/92869945cc5b78ee8a1ef90336fe070893e3458a
git.kernel.org/stable/c/a61156314b66456ab6a291ed5deba1ebd002ab3c
git.kernel.org/stable/c/e87ef30fe73e7e10d2c85bdcc778dcec24dca553
launchpad.net/bugs/cve/CVE-2021-47254
nvd.nist.gov/vuln/detail/CVE-2021-47254
security-tracker.debian.org/tracker/CVE-2021-47254
www.cve.org/CVERecord?id=CVE-2021-47254
Related
