CVE-2024-35815
Published: May 17, 2024
Modified: May 12, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion The first kiocb_set_cancel_fn() argument may point at a struct kiocb that is not embedded inside struct aio_kiocb. With the current code, depending on the compiler, the req->ki_ctx read happens either before the IOCB_AIO_RW test or after that test. Move the req->ki_ctx read such that it is guaranteed that the IOCB_AIO_RW test happens first.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 337b543e274fe7a8f47df3c8293cc6686ffa620f - < 10ca82aff58434e122c7c757cf0497c335f993f3affected b4eea7a05ee0ab5ab0514421e6ba8c5d249cf942 - < 396dbbc18963648e9d1a4edbb55cfe08fa374d50affected ea1cd64d59f22d6d13f367d62ec6e27b9344695f - < 94eb0293703ced580f05dfbe5a57da5931e9aee2affected d7b6fa97ec894edd02f64b83e5e72e1aa352f353 - < a71cba07783abc76b547568b6452cd1dd9981410affected 18f614369def2a11a52f569fe0f910b199d13487 - < 18d5fc3c16cc317bd0e5f5dabe0660df415cadb7+3 more versions |
Linux | Linux | affected 4.19.308 - < 4.19.312affected 5.4.270 - < 5.4.274affected 5.10.211 - < 5.10.215affected 5.15.150 - < 5.15.154affected 6.1.80 - < 6.1.84+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now