CVE-2024-39494

ima: Fix use-after-free on a dentry's dname.name

State: Published
Severity: 7.8 High
Published: Jul 12, 2024
Updated: Aug 5, 2026
Reserved: Jun 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ima: Fix use-after-free on a dentry's dname.name

->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->d_lock on its parent, ->i_rwsem exclusive on the parent's inode, rename_lock), but none of those are met at any of the sites. Take a stable snapshot of the name instead.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before 480afcbeb7aaaa22677d3dd48ec590b441eaac1aAffected 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before edf287bc610b18d7a9c0c0c1cb2e97b9348c71bbAffected 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before 0b31e28fbd773aefb6164687e0767319b8199829Affected 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before 7fb374981e31c193b1152ed8d3b0a95b671330d4Affected 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before dd431c3ac1fc34a9268580dd59ad3e3c76b32a8cAffected 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before a78a6f0da57d058e2009e9958fdcef66f165208cAffected 2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before be84f32bb2c981ca670922e047cdde1488b233deAffected
LinuxLinux	3.7Affected before 3.7Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.97 through 6.1.Not affected 6.6.35 through 6.6.Not affected 6.9.6 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before 480afcbeb7aaaa22677d3dd48ec590b441eaac1aAffected
2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before edf287bc610b18d7a9c0c0c1cb2e97b9348c71bbAffected
2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before 0b31e28fbd773aefb6164687e0767319b8199829Affected
2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before 7fb374981e31c193b1152ed8d3b0a95b671330d4Affected
2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before dd431c3ac1fc34a9268580dd59ad3e3c76b32a8cAffected
2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before a78a6f0da57d058e2009e9958fdcef66f165208cAffected
2fe5d6def1672ae6635dd71867bf36dcfaa7434b to before be84f32bb2c981ca670922e047cdde1488b233deAffected

LinuxLinux

3.7Affected
before 3.7Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.97 through 6.1.*Not affected
6.6.35 through 6.6.*Not affected
6.9.6 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.