ocfs2: dlmfs: Fix error handling of user_dlm_destroy_lock
Summary
GSD-2022-1002586: ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock. Affects Kernel versions < 2c5e26a626fe46675bceba853e12aaf13c712e10. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ocfs2 package is a distributed file system for Linux that provides shared disk access among multiple nodes in a cluster. It utilizes the Distributed Lock Manager (DLM) to coordinate access to shared resources. The dlmfs component is responsible for managing the DLM file system. This vulnerability affects the user_dlm_destroy_lock function in the dlmfs module.
Vulnerability Detail
The user_dlm_destroy_lock function in the ocfs2 dlmfs module has a flaw in its error handling logic. When an error occurs during the destruction of a lock, the function fails to properly handle the error, leading to a potential use-after-free vulnerability. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The ocfs2 dlmfs module in the Linux Kernel is vulnerable to a use-after-free vulnerability in the user_dlm_destroy_lock function. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.18.3 or later. If you have any further questions or need assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocfs2 is a distributed file system for Linux that provides shared disk access among multiple nodes in a cluster.
The dlmfs module is responsible for managing the Distributed Lock Manager (DLM) file system in ocfs2.
The user_dlm_destroy_lock function is a function in the dlmfs module that is used to destroy a lock.
A use-after-free vulnerability occurs when a program continues to use a memory address after it has been freed, leading to potential security issues.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
