Riskcovery

CVE-2024-38580

epoll: be better about file lifetimes

State
Published
Severity
7.8 High
Published
Jun 19, 2024
Updated
Aug 5, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

epoll: be better about file lifetimes

epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won't actually get a reference to the file any more: it's dead regardless.

Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cbfd1088e24ec4c1199756a37cb8e4cd0a4b016eAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 559214eb4e5c3d05e69428af2fae2691ba1eb784Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4f65f4defe4e23659275ce5153541cd4f76ce2d2Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 16e3182f6322575eb7c12e728ad3c7986a189d5dAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4efaa5acf0a1d2b5947f98abb3acf8bfd966422bAffected
LinuxLinux
  • 2.6.12Affected
  • before 2.6.12Not affected
  • 5.15.161 through 5.15.*Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.