Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 2895f1831e911ca87d4efdf43e35eb72a0c7e66e before 9c25faf72d780a9c71081710cd48759d61ff6e9b; affected 2895f1831e911ca87d4efdf43e35eb72a0c7e66e before 6e73b946a379a1dfbb62626af93843bdfb53753d; affected 2895f1831e911ca87d4efdf43e35eb72a0c7e66e before 5236ada8ebbd9e7461f17477357582f5be4f46f7; affected 2895f1831e911ca87d4efdf43e35eb72a0c7e66e before 9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc; affected 2895f1831e911ca87d4efdf43e35eb72a0c7e66e before c9ea57c91f03bcad415e1a20113bdb2077bcf990; affected cdf62c535a9bfd5ff0eef4b91669da39d8abc0c3; affected 5171ef20bae852ff38f4cfdb368bcdcc744776d0; affected 5.17.15 before 5.18; affected 5.18.4 before 5.19 |
| Linux / Linux | affected 5.19; unaffected 0 before 5.19; unaffected 6.1.113 through 6.1.*; unaffected 6.6.54 through 6.6.*; unaffected 6.10.13 through 6.10.*; unaffected 6.11.2 through 6.11.*; unaffected 6.12 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/9c25faf72d780a9c71081710cd48759d61ff6e9b
- https://git.kernel.org/stable/c/6e73b946a379a1dfbb62626af93843bdfb53753d
- https://git.kernel.org/stable/c/5236ada8ebbd9e7461f17477357582f5be4f46f7
- https://git.kernel.org/stable/c/9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc
- https://git.kernel.org/stable/c/c9ea57c91f03bcad415e1a20113bdb2077bcf990
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.