CVE-2024-49966

ocfs2: cancel dqi_sync_work before freeing oinfo

State: Published
Severity: 7.8 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: cancel dqi_sync_work before freeing oinfo

ocfs2_global_read_info() will initialize and schedule dqi_sync_work at the end, if error occurs after successfully reading global quota, it will trigger the following warning with CONFIG_DEBUG_OBJECTS_* enabled:

ODEBUG: free active (active state 0) object: 00000000d8b0ce28 object type: timer_list hint: qsync_work_fn+0x0/0x16c

This reports that there is an active delayed work when freeing oinfo in error handling, so cancel dqi_sync_work first. BTW, return status instead of -1 when .read_file_info fails.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before fc5cc716dfbdc5fd5f373ff3b51358174cf88bfcAffected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 89043e7ed63c7fc141e68ea5a79758ed24b6c699Affected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 14114d8148db07e7946fb06b56a50cfa425e26c7Affected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 4173d1277c00baeedaaca76783e98b8fd0e3c08dAffected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before bbf41277df8b33fbedf4750a9300c147e8f104ebAffected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before ef768020366f47d23f39c4f57bcb03af6d1e24b3Affected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before a4346c04d055bf7e184c18a73dbd23b6a9811118Affected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 0d707a33c84b371cb66120e198eed3374726ddd8Affected 171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 35fccce29feb3706f649726d410122dd81b92c18Affected
LinuxLinux	2.6.29Affected before 2.6.29Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.55 through 6.6.Not affected 6.10.14 through 6.10.Not affected 6.11.3 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before fc5cc716dfbdc5fd5f373ff3b51358174cf88bfcAffected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 89043e7ed63c7fc141e68ea5a79758ed24b6c699Affected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 14114d8148db07e7946fb06b56a50cfa425e26c7Affected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 4173d1277c00baeedaaca76783e98b8fd0e3c08dAffected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before bbf41277df8b33fbedf4750a9300c147e8f104ebAffected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before ef768020366f47d23f39c4f57bcb03af6d1e24b3Affected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before a4346c04d055bf7e184c18a73dbd23b6a9811118Affected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 0d707a33c84b371cb66120e198eed3374726ddd8Affected
171bf93ce11f4c9929fdce6ce63df8da2f3c4475 to before 35fccce29feb3706f649726d410122dd81b92c18Affected

LinuxLinux

2.6.29Affected
before 2.6.29Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.55 through 6.6.*Not affected
6.10.14 through 6.10.*Not affected
6.11.3 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.