CVE-2024-26622

tomoyo: fix UAF write bug in tomoyo_write_control()

State: Published
Severity: Not scored
Published: Mar 4, 2024
Updated: May 11, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

tomoyo: fix UAF write bug in tomoyo_write_control()

Since tomoyo_write_control() updates head->write_buf when write() of long lines is requested, we need to fetch head->write_buf after head->io_sem is held. Otherwise, concurrent write() requests can cause use-after-free-write and double-free problems.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before a23ac1788e2c828c097119e9a3178f0b7e503feeAffected bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 7d930a4da17958f869ef679ee0e4a8729337affcAffected bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 3bfe04c1273d30b866f4c7c238331ed3b08e5824Affected bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 2caa605079488da9601099fbda460cfc1702839fAffected bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 6edefe1b6c29a9932f558a898968a9fcbeec5711Affected bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 2f03fc340cac9ea1dc63cbf8c93dd2eb0f227815Affected
LinuxLinux	3.1Affected before 3.1Not affected 5.10.212 through 5.10.Not affected 5.15.151 through 5.15.Not affected 6.1.81 through 6.1.Not affected 6.6.21 through 6.6.Not affected 6.7.9 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before a23ac1788e2c828c097119e9a3178f0b7e503feeAffected
bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 7d930a4da17958f869ef679ee0e4a8729337affcAffected
bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 3bfe04c1273d30b866f4c7c238331ed3b08e5824Affected
bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 2caa605079488da9601099fbda460cfc1702839fAffected
bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 6edefe1b6c29a9932f558a898968a9fcbeec5711Affected
bd03a3e4c9a9df0c6b007045fa7fc8889111a478 to before 2f03fc340cac9ea1dc63cbf8c93dd2eb0f227815Affected

LinuxLinux

3.1Affected
before 3.1Not affected
5.10.212 through 5.10.*Not affected
5.15.151 through 5.15.*Not affected
6.1.81 through 6.1.*Not affected
6.6.21 through 6.6.*Not affected
6.7.9 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.