CVE-2024-38583: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free of timer for log writer thread Patch series "nilfs2: fix log writer related issues". This bug fix series covers three nilfs2 log writer-related issues, including a timer use-after-free issue and potential deadlock issue on unmount, and a potential freeze issue in event synchronization found during their analysis. Details are described in each commit log. This patch (of 3): A use-after-free issue has been reported regarding the timer sc_timer on the nilfs_sc_info structure. The problem is that even though it is used to wake up a sleeping log writer thread, sc_timer is not shut down until the nilfs_sc_info structure is about to be freed, and is used regardless of the thread's lifetime. Fix this issue by limiting the use of sc_timer only while the log writer thread is alive.

Affected products

• Linux Linux Kernel: from 2.6.35, before 4.19.316 (fixed in 4.19.316); from 4.20, before 5.4.278 (fixed in 5.4.278); from 5.5, before 5.10.219 (fixed in 5.10.219); from 5.11, before 5.15.161 (fixed in 5.15.161); from 5.16, before 6.1.94 (fixed in 6.1.94); from 6.2, before 6.6.33 (fixed in 6.6.33); …

Published 2024-06-19. Last modified 2026-08-04.