QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-49855

Back to search

CVE-2024-49855

Published: Oct 21, 2024

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.

VendorProductVersions

Linux

Linux

affected
2895f1831e911ca87d4efdf43e35eb72a0c7e66e - < 9c25faf72d780a9c71081710cd48759d61ff6e9b
affected
2895f1831e911ca87d4efdf43e35eb72a0c7e66e - < 6e73b946a379a1dfbb62626af93843bdfb53753d
affected
2895f1831e911ca87d4efdf43e35eb72a0c7e66e - < 5236ada8ebbd9e7461f17477357582f5be4f46f7
affected
2895f1831e911ca87d4efdf43e35eb72a0c7e66e - < 9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc
affected
2895f1831e911ca87d4efdf43e35eb72a0c7e66e - < c9ea57c91f03bcad415e1a20113bdb2077bcf990

+4 more versions

Linux

Linux

affected
5.19
unaffected
0 - < 5.19
unaffected
6.1.113 - <= 6.1.*
unaffected
6.6.54 - <= 6.6.*
unaffected
6.10.13 - <= 6.10.*

+2 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now