CVE-2024-35821

CVSS v3.1 7.5 (High)
75% Progress
EPSS 0.04 % (14th)
0.04% Progress
Advisories 23
NVD Status Awaiting Analysis

In the Linux kernel, the following vulnerability has been resolved:

ubifs: Set page uptodate in the correct place

Page cache reads are lockless, so setting the freshly allocated page
uptodate before we've overwritten it with the data it's supposed to have
in it will allow a simultaneous reader to see old data. Move the call
to SetPageUptodate into ubifs_write_end(), which is after we copied the
new data into the page.

Weaknesses
CWE-772
Missing Release of Resource after Effective Lifetime
CVE Status
PUBLISHED
NVD Status
Awaiting Analysis
CNA
kernel.org
Published Date
2024-05-17 14:15:17
(4 months ago)
Updated Date
2024-07-03 02:02:14
(2 months ago)
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...