CVE-2024-41020

filelock: Fix fcntl/close race recovery compat path

State: Published
Severity: 7.8 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

filelock: Fix fcntl/close race recovery compat path

When I wrote commit 3cad1bc01041 ("filelock: Remove locks reliably when fcntl/close race is detected"), I missed that there are two copies of the code I was patching: The normal version, and the version for 64-bit offsets on 32-bit kernels. Thanks to Greg KH for stumbling over this while doing the stable backport...

Apply exactly the same fix to the compat path for 32-bit kernels.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c293621bbf678a3d85e3ed721c3921c8a670610d to before a561145f3ae973ebf3e0aee41624e92a6c5cb38dAffected c293621bbf678a3d85e3ed721c3921c8a670610d to before 4c43ad4ab41602201d34c66ac62130fe339d686fAffected c293621bbf678a3d85e3ed721c3921c8a670610d to before 911cc83e56a2de5a40758766c6a70d6998248860Affected c293621bbf678a3d85e3ed721c3921c8a670610d to before 53e21cfa68a7d12de378b7116c75571f73e0dfa2Affected c293621bbf678a3d85e3ed721c3921c8a670610d to before f4d0775c6e2f1340ca0725f0337de149aaa989caAffected c293621bbf678a3d85e3ed721c3921c8a670610d to before 73ae349534ebc377328e7d21891e589626c6e82cAffected c293621bbf678a3d85e3ed721c3921c8a670610d to before 5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02Affected c293621bbf678a3d85e3ed721c3921c8a670610d to before ed898f9ca3fa32c56c858b463ceb9d9936cc69c4Affected c293621bbf678a3d85e3ed721c3921c8a670610d to before f8138f2ad2f745b9a1c696a05b749eabe44337eaAffected
LinuxLinux	2.6.13Affected before 2.6.13Not affected 4.19.319 through 4.19.Not affected 5.4.281 through 5.4.Not affected 5.10.223 through 5.10.Not affected 5.15.164 through 5.15.Not affected 6.1.102 through 6.1.Not affected 6.6.43 through 6.6.Not affected 6.9.12 through 6.9.Not affected 6.10.2 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

c293621bbf678a3d85e3ed721c3921c8a670610d to before a561145f3ae973ebf3e0aee41624e92a6c5cb38dAffected
c293621bbf678a3d85e3ed721c3921c8a670610d to before 4c43ad4ab41602201d34c66ac62130fe339d686fAffected
c293621bbf678a3d85e3ed721c3921c8a670610d to before 911cc83e56a2de5a40758766c6a70d6998248860Affected
c293621bbf678a3d85e3ed721c3921c8a670610d to before 53e21cfa68a7d12de378b7116c75571f73e0dfa2Affected
c293621bbf678a3d85e3ed721c3921c8a670610d to before f4d0775c6e2f1340ca0725f0337de149aaa989caAffected
c293621bbf678a3d85e3ed721c3921c8a670610d to before 73ae349534ebc377328e7d21891e589626c6e82cAffected
c293621bbf678a3d85e3ed721c3921c8a670610d to before 5b0af8e4c70e4b884bb94ff5f0cd49ecf1273c02Affected
c293621bbf678a3d85e3ed721c3921c8a670610d to before ed898f9ca3fa32c56c858b463ceb9d9936cc69c4Affected
c293621bbf678a3d85e3ed721c3921c8a670610d to before f8138f2ad2f745b9a1c696a05b749eabe44337eaAffected

LinuxLinux

2.6.13Affected
before 2.6.13Not affected
4.19.319 through 4.19.*Not affected
5.4.281 through 5.4.*Not affected
5.10.223 through 5.10.*Not affected
5.15.164 through 5.15.*Not affected
6.1.102 through 6.1.*Not affected
6.6.43 through 6.6.*Not affected
6.9.12 through 6.9.*Not affected
6.10.2 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.