NetSight
IP …
medium5.5

CVE-2024-35815

In the Linux kernel, the following vulnerability has been resolved: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion The first kiocb_set_cancel…

Impact

In the Linux kernel, the following vulnerability has been resolved: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion The first kiocb_set_cancel_fn() argument may point at a struct kiocb that is not embedded inside struct aio_kiocb. With the current code, depending on the compiler, the req->ki_ctx read happens either before the IOCB_AIO_RW test or after that test. Move the req->ki_ctx read such that it is guaranteed that the IOCB_AIO_RW test happens first.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.308 before 4.19.312
from 5.4.270 before 5.4.274
from 5.10.211 before 5.10.215
from 5.15.150 before 5.15.154
from 6.1.80 before 6.1.84
from 6.6.19 before 6.6.24
DebianDebian Linux
Version 10.0

References