CVE-2024-35815

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the fs/aio component of the Linux kernel, where the first kiocb set cancel fn() argument may point at a struct kiocb that is not embedded inside struct aio kiocb. This can cause the req->ki ctx read to happen either before or after the IOCB AIO RW test, depending on the compiler. The problem is resolved by moving the req->ki ctx read to guarantee that the IOCB AIO RW test happens first. The vulnerability may allow an attacker to cause a denial of service.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.