CVE - CVE-2024-38580

CVE-ID
CVE-2024-38580	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: epoll: be better about file lifetimes epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won't actually get a reference to the file any more: it's dead regardless. Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/16e3182f6322575eb7c12e728ad3c7986a189d5d URL:https://git.kernel.org/stable/c/16e3182f6322575eb7c12e728ad3c7986a189d5d MISC:https://git.kernel.org/stable/c/4efaa5acf0a1d2b5947f98abb3acf8bfd966422b URL:https://git.kernel.org/stable/c/4efaa5acf0a1d2b5947f98abb3acf8bfd966422b MISC:https://git.kernel.org/stable/c/4f65f4defe4e23659275ce5153541cd4f76ce2d2 URL:https://git.kernel.org/stable/c/4f65f4defe4e23659275ce5153541cd4f76ce2d2 MISC:https://git.kernel.org/stable/c/559214eb4e5c3d05e69428af2fae2691ba1eb784 URL:https://git.kernel.org/stable/c/559214eb4e5c3d05e69428af2fae2691ba1eb784 MISC:https://git.kernel.org/stable/c/cbfd1088e24ec4c1199756a37cb8e4cd0a4b016e URL:https://git.kernel.org/stable/c/cbfd1088e24ec4c1199756a37cb8e4cd0a4b016e
Assigning CNA
kernel.org
Date Record Created
20240618	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240618)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)