CVE-2024-49965

ocfs2: remove unreasonable unlock in ocfs2_read_blocks

MEDIUM

5.5

CVSS Score

Published: October 21, 2024 at 06:02 PM UTC

Updated: August 5, 2026 at 12:05 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 4.14.157v ≥ 4.4.204v ≥ 4.9.2044.14.157 ≤ v < 4.154.14.157 ≤ v < 4.194.19.87 ≤ v < 4.19.3234.19.87 ≤ v < 4.204.20 ≤ v < 5.10.2274.20 ≤ v < 5.15.1684.20 ≤ v < 5.4.2854.20 ≤ v < 6.1.1134.20 ≤ v < 6.10.144.20 ≤ v < 6.11.34.20 ≤ v < 6.124.20 ≤ v < 6.6.554.4.204 ≤ v < 4.54.4.204 ≤ v < 4.94.9.204 ≤ v < 4.104.9.204 ≤ v < 4.145.11 ≤ v < 5.15.1685.16 ≤ v < 6.1.1136.11 ≤ v < 6.11.36.2 ≤ v < 6.6.556.7 ≤ v < 6.10.141f93d5e36753fc4d6ec67f5ce78c9c6f2dd564.14.157 4.19.87 4.20 4.4.204 4.9.20465cbd1279f4b999d56a838344a30642db24cd2156c150df9c2e80b5cf86f5a0d98beb7390ad63bfc97e1db17bc1ef4c2e1789bc9323c7be44fba53f8cf76c78595ca87548ca5e45c862ac9e0949c4687

Vendor states this is fixed in 39a88623af3f1c686bf6db1e677ed865ffe6fccc (fixed)

Vendor states this is fixed in 3f1ca6ba5452d53c598a45d21267a2c0c221eef3 (fixed)

Vendor states this is fixed in 5245f109b4afb6595360d4c180d483a6d2009a59 (fixed)

Vendor states this is fixed in 81aba693b129e82e11bb54f569504d943d018de9 (fixed)

Vendor states this is fixed in 84543da867c967edffd5065fa910ebf56aaae49d (fixed)

Vendor states this is fixed in 9753bcb17b36c9add9b32c61766ddf8d2d161911 (fixed)

Vendor states this is fixed in c03a82b4a0c935774afa01fd6d128b444fd930a1 (fixed)

Vendor states this is fixed in df4f20fc3673cee11abf2c571987a95733cb638d (fixed)

Vendor states this is fixed in f55a33fe0fb5274ef185fd61947cf142138958af (fixed)

Affected range stops below 4.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.14, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.15, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.19, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 4.19.323 (unaffected)

Vendor states this is fixed in 4.20 (unaffected)

Affected range stops below 4.5, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.9, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.10.227 (unaffected)

Vendor states this is fixed in 5.15.168 (unaffected)

Vendor states this is fixed in 5.4.285 (unaffected)

Vendor states this is fixed in 6.1.113 (unaffected)

Vendor states this is fixed in 6.10.14 (unaffected)

Vendor states this is fixed in 6.11.3 (unaffected)

Vendor states this is fixed in 6.12 (unaffected)

Vendor states this is fixed in 6.6.55 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references