PT-2024-33797

CVE-2024-49956

·

Published

2024-08-20

·

Updated

2025-02-28

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A double destroy workqueue error has been identified in the Linux kernel, specifically in the gfs2 module. This issue occurs when gfs2 fill super() fails, leading to destroy workqueue() being called twice on the same work queue. The problem can be resolved by setting the work queue pointer to NULL after the first destroy workqueue() call and checking for a NULL pointer before attempting to destroy the work queue again.
Recommendations: To fix this issue, set the work queue pointer to NULL after the first destroy workqueue() call and check for a NULL pointer before attempting to destroy the work queue again. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7310-1
Found an issue in the description? Have something to add? Feel free to write us 👾