Riskcovery

CVE-2024-49855

nbd: fix race between timeout and normal completion

State
Published
Severity
9.8 Critical
Published
Oct 21, 2024
Updated
Aug 5, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nbd: fix race between timeout and normal completion

If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered.

Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2895f1831e911ca87d4efdf43e35eb72a0c7e66e to before 9c25faf72d780a9c71081710cd48759d61ff6e9bAffected
  • 2895f1831e911ca87d4efdf43e35eb72a0c7e66e to before 6e73b946a379a1dfbb62626af93843bdfb53753dAffected
  • 2895f1831e911ca87d4efdf43e35eb72a0c7e66e to before 5236ada8ebbd9e7461f17477357582f5be4f46f7Affected
  • 2895f1831e911ca87d4efdf43e35eb72a0c7e66e to before 9a74c3e6c0d686c26ba2aab66d15ddb89dc139ccAffected
  • 2895f1831e911ca87d4efdf43e35eb72a0c7e66e to before c9ea57c91f03bcad415e1a20113bdb2077bcf990Affected
  • cdf62c535a9bfd5ff0eef4b91669da39d8abc0c3Affected
  • 5171ef20bae852ff38f4cfdb368bcdcc744776d0Affected
  • 5.17.15 to before 5.18Affected
  • 5.18.4 to before 5.19Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.113 through 6.1.*Not affected
  • 6.6.54 through 6.6.*Not affected
  • 6.10.13 through 6.10.*Not affected
  • 6.11.2 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.