CVE-2024-49855 - Linux Kernel NBD Use-After-Free

CVE ID : CVE-2024-49855
Published : Oct. 21, 2024, 1:15 p.m. | 24 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...