CVE-2024-38570

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released. To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks. As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead.

• CWE-416

• https://git.kernel.org/stable/c/0636b34b44589b142700ac137b5f69802cfe2e37Patch
• https://git.kernel.org/stable/c/501cd8fabf621d10bd4893e37f6ce6c20523c8caPatch
• https://git.kernel.org/stable/c/d98779e687726d8f8860f1c54b5687eec5f63a73Patch
• https://git.kernel.org/stable/c/e42e8a24d7f02d28763d16ca7ec5fc6d1f142af0Patch
• https://git.kernel.org/stable/c/0636b34b44589b142700ac137b5f69802cfe2e37Patch
• https://git.kernel.org/stable/c/501cd8fabf621d10bd4893e37f6ce6c20523c8caPatch
• https://git.kernel.org/stable/c/d98779e687726d8f8860f1c54b5687eec5f63a73Patch
• https://git.kernel.org/stable/c/e42e8a24d7f02d28763d16ca7ec5fc6d1f142af0Patch

Published

Jun 19, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38565In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38566In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38567In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38568In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38569In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-3857The JIT created incorrect code for arguments in certain case…7.8
• CVE-2024-38571In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38572In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-38573In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2024-38574In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38575In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38576In the Linux kernel, the following vulnerability has been re…7