NVD Vulnerability Detail

CVE-2024-49965

Summary	In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock.
Publication Date	Oct. 22, 2024, 3:15 a.m.
Registration Date	Oct. 22, 2024, 12:02 p.m.
Last Update	Nov. 9, 2024, 1:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3	Patch
2	https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af	Patch
3	https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9	Patch
4	https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d	Patch
5	https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d	Patch
6	https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc	Patch
7	https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1	Patch
8	https://git.kernel.org/stable/c/5245f109b4afb6595360d4c180d483a6d2009a59
9	https://git.kernel.org/stable/c/9753bcb17b36c9add9b32c61766ddf8d2d161911

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-667	不適切なロック	https://cwe.mitre.org/data/definitions/667.html

JVN Vulnerability Information

Linux の Linux Kernel におけるリソースのロックに関する脆弱性

Title	Linux の Linux Kernel におけるリソースのロックに関する脆弱性
Summary	Linux の Linux Kernel には、リソースのロックに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 9, 2024, midnight
Registration Date	Nov. 8, 2024, 11:18 a.m.
Last Update	Aug. 20, 2025, 5:43 p.m.

Affected System

Linux

Linux Kernel 4.14.157 以上 4.19 未満

Linux Kernel 4.19.87 以上 4.20 未満

Linux Kernel 4.20 以上 5.10.227 未満

Linux Kernel 4.4.204 以上 4.9 未満

Linux Kernel 4.9.204 以上 4.14 未満

Linux Kernel 5.11 以上 5.15.168 未満

Linux Kernel 5.16 以上 6.1.113 未満

Linux Kernel 6.11 以上 6.11.3 未満

Linux Kernel 6.2 以上 6.6.55 未満

Linux Kernel 6.7 以上 6.10.14 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-49965	https://www.cve.org/CVERecord?id=CVE-2024-49965
National Vulnerability Database (NVD)
2	CVE-2024-49965	https://nvd.nist.gov/vuln/detail/CVE-2024-49965

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-667	http://cwe.mitre.org/data/definitions/667.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (39a8862)	https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc
2	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (3f1ca6b)	https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3
3	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (81aba69)	https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9
4	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (84543da)	https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d
5	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (c03a82b)	https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1
6	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (df4f20f)	https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d
7	ocfs2: remove unreasonable unlock in ocfs2_read_blocks (f55a33f)	https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年11月08日] 掲載	Nov. 8, 2024, 11:18 a.m.
2	[2025年08月20日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 20, 2025, 5:42 p.m.