CVE - CVE-2024-57892

CVE-ID
CVE-2024-57892	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv When mounting ocfs2 and then remounting it as read-only, a slab-use-after-free occurs after the user uses a syscall to quota_getnextquota. Specifically, sb_dqinfo(sb, type)->dqi_priv is the dangling pointer. During the remounting process, the pointer dqi_priv is freed but is never set as null leaving it to be accessed. Additionally, the read-only option for remounting sets the DQUOT_SUSPENDED flag instead of setting the DQUOT_USAGE_ENABLED flags. Moreover, later in the process of getting the next quota, the function ocfs2_get_next_id is called and only checks the quota usage flags and not the quota suspended flags. To fix this, I set dqi_priv to null when it is freed after remounting with read-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id. [akpm@linux-foundation.org: coding-style cleanups]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/2d431192486367eee03cc28d0b53b97dafcb8e63 URL:https://git.kernel.org/stable/c/2d431192486367eee03cc28d0b53b97dafcb8e63 MISC:https://git.kernel.org/stable/c/2e3d203b1adede46bbba049e497765d67865be18 URL:https://git.kernel.org/stable/c/2e3d203b1adede46bbba049e497765d67865be18 MISC:https://git.kernel.org/stable/c/5f3fd772d152229d94602bca243fbb658068a597 URL:https://git.kernel.org/stable/c/5f3fd772d152229d94602bca243fbb658068a597 MISC:https://git.kernel.org/stable/c/ba950a02d8d23811aa1120affd3adedcfac6153d URL:https://git.kernel.org/stable/c/ba950a02d8d23811aa1120affd3adedcfac6153d
Assigning CNA
kernel.org
Date Record Created
20250111	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250111)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)