CVE-2024-41012

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a race condition between fcntl setlk() and close() in the Linux kernel, which can lead to use-after-free reads when userspace reads /proc/locks. This can potentially allow an attacker to read arbitrary kernel memory, but it cannot corrupt kernel memory. The problem arises when fcntl setlk() races with close(), removing the created lock with do lock file wait(), and Linux Security Modules (LSMs) allow the first do lock file wait() while denying the second. Additionally, posix lock file() may fail to remove a lock due to GFP KERNEL allocation failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.