CVE - CVE-2024-42250

CVE-ID
CVE-2024-42250	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: add missing lock protection when polling Add missing lock protection in poll routine when iterating xarray, otherwise: Even with RCU read lock held, only the slot of the radix tree is ensured to be pinned there, while the data structure (e.g. struct cachefiles_req) stored in the slot has no such guarantee. The poll routine will iterate the radix tree and dereference cachefiles_req accordingly. Thus RCU read lock is not adequate in this case and spinlock is needed here.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/6bb6bd3dd6f382dfd36220d4b210a0c77c066651 URL:https://git.kernel.org/stable/c/6bb6bd3dd6f382dfd36220d4b210a0c77c066651 MISC:https://git.kernel.org/stable/c/8eadcab7f3dd809edbe5ae20533ff843dfea3a07 URL:https://git.kernel.org/stable/c/8eadcab7f3dd809edbe5ae20533ff843dfea3a07 MISC:https://git.kernel.org/stable/c/97cfd5e20ddc2e33e16ce369626ce76c9a475fd7 URL:https://git.kernel.org/stable/c/97cfd5e20ddc2e33e16ce369626ce76c9a475fd7 MISC:https://git.kernel.org/stable/c/cf5bb09e742a9cf6349127e868329a8f69b7a014 URL:https://git.kernel.org/stable/c/cf5bb09e742a9cf6349127e868329a8f69b7a014
Assigning CNA
kernel.org
Date Record Created
20240730	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240730)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)