CVE-2024-47746

MEDIUM EPSS 5.4%
Published Oct 21, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 21, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set This may be a typo. The comment has said shared locks are not allowed when this bit is set. If using shared lock, the wait in `fuse_file_cached_io_open` may be forever.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
5.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-667

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥6.9  –  <6.10.13
linuxlinux_kernel*≥6.11  –  <6.11.2

References 3

  • git.kernel.org https://git.kernel.org/stable/c/2f3d8ff457982f4055fe8f7bf19d3821ba22c376
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4e181761ffec67307157a7e8a78d58ee4130cf00
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa4890bd8237e5a1e7428acd7328729db2703b23
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2f3d8ff457982f4055fe8f7bf19d3821ba22c376
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4e181761ffec67307157a7e8a78d58ee4130cf00
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/fa4890bd8237e5a1e7428acd7328729db2703b23
    Patch