GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2024-49965 (GCVE-0-2024-49965)

Vulnerability from cvelistv5 – Published: 2024-10-21 18:02 – Updated: 2026-08-05 11:40
VLAI
Title
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
Summary
In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-10-22 13:34 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 6c150df9c2e80b5cf86f5a0d98beb7390ad63bfc , < 5245f109b4afb6595360d4c180d483a6d2009a59 (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < 9753bcb17b36c9add9b32c61766ddf8d2d161911 (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < 3f1ca6ba5452d53c598a45d21267a2c0c221eef3 (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < f55a33fe0fb5274ef185fd61947cf142138958af (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < 81aba693b129e82e11bb54f569504d943d018de9 (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < 84543da867c967edffd5065fa910ebf56aaae49d (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < df4f20fc3673cee11abf2c571987a95733cb638d (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < 39a88623af3f1c686bf6db1e677ed865ffe6fccc (git)
Affected: cf76c78595ca87548ca5e45c862ac9e0949c4687 , < c03a82b4a0c935774afa01fd6d128b444fd930a1 (git)
Affected: 01f93d5e36753fc4d06ec67f05ce78c9c6f2dd56 (git)
Affected: 65cbd1279f4b999d56a838344a30642db24cd215 (git)
Affected: 97e1db17bc1ef4c2e1789bc9323c7be44fba53f8 (git)
Affected: 4.19.87 , < 4.19.323 (semver)
Affected: 4.4.204 , < 4.5 (semver)
Affected: 4.9.204 , < 4.10 (semver)
Affected: 4.14.157 , < 4.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 4.20
Unaffected: 0 , < 4.20 (semver)
Unaffected: 4.19.323 , ≤ 4.19.* (semver)
Unaffected: 5.4.285 , ≤ 5.4.* (semver)
Unaffected: 5.10.227 , ≤ 5.10.* (semver)
Unaffected: 5.15.168 , ≤ 5.15.* (semver)
Unaffected: 6.1.113 , ≤ 6.1.* (semver)
Unaffected: 6.6.55 , ≤ 6.6.* (semver)
Unaffected: 6.10.14 , ≤ 6.10.* (semver)
Unaffected: 6.11.3 , ≤ 6.11.* (semver)
Unaffected: 6.12 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-49965",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-22T13:34:35.371630Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-22T13:38:47.085Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:23:47.003Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ocfs2/buffer_head_io.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "5245f109b4afb6595360d4c180d483a6d2009a59",
              "status": "affected",
              "version": "6c150df9c2e80b5cf86f5a0d98beb7390ad63bfc",
              "versionType": "git"
            },
            {
              "lessThan": "9753bcb17b36c9add9b32c61766ddf8d2d161911",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "3f1ca6ba5452d53c598a45d21267a2c0c221eef3",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "f55a33fe0fb5274ef185fd61947cf142138958af",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "81aba693b129e82e11bb54f569504d943d018de9",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "84543da867c967edffd5065fa910ebf56aaae49d",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "df4f20fc3673cee11abf2c571987a95733cb638d",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "39a88623af3f1c686bf6db1e677ed865ffe6fccc",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "lessThan": "c03a82b4a0c935774afa01fd6d128b444fd930a1",
              "status": "affected",
              "version": "cf76c78595ca87548ca5e45c862ac9e0949c4687",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "01f93d5e36753fc4d06ec67f05ce78c9c6f2dd56",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "65cbd1279f4b999d56a838344a30642db24cd215",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "97e1db17bc1ef4c2e1789bc9323c7be44fba53f8",
              "versionType": "git"
            },
            {
              "lessThan": "4.19.323",
              "status": "affected",
              "version": "4.19.87",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.204",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.204",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.157",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ocfs2/buffer_head_io.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.323",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.285",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.227",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.323",
                  "versionStartIncluding": "4.19.87",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.285",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.227",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.168",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.55",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.14",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.3",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.204",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.204",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.157",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: remove unreasonable unlock in ocfs2_read_blocks\n\nPatch series \"Misc fixes for ocfs2_read_blocks\", v5.\n\nThis series contains 2 fixes for ocfs2_read_blocks().  The first patch fix\nthe issue reported by syzbot, which detects bad unlock balance in\nocfs2_read_blocks().  The second patch fixes an issue reported by Heming\nZhao when reviewing above fix.\n\n\nThis patch (of 2):\n\nThere was a lock release before exiting, so remove the unreasonable unlock."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable path is reached only through local syscalls against a mounted ocfs2 volume (stat/open/readdir/getxattr/read reaching ocfs2_read_inode_block, dx-leaf, xattr-bucket and extent-map reads) or by mounting a crafted ocfs2 image; no network protocol handler processes attacker data here.\nAC:L - sb_getblk() failure is deterministic for an out-of-range block number supplied by on-disk metadata (grow_buffers() rejects it outright), and is also inducible via memory pressure; the follow-on mutual-exclusion failure has a wait_on_buffer()-wide window with the attacker driving both racing threads.\nPR:L - Any unprivileged local user with access to a mounted ocfs2 filesystem can issue the metadata reads that reach ocfs2_read_blocks() and drive the allocation failure; no capability, and ocfs2 metadata reads are not gated behind CAP_SYS_ADMIN.\nUI:N - On an already-mounted ocfs2 volume (the normal cluster deployment) the attacker triggers the double unlock purely with its own syscalls; no victim action is needed.\nS:U - The corrupted mutex, the ocfs2 metadata cache and the buffer heads all live in the same kernel security authority; no VM, IOMMU or sandbox boundary is crossed.\nC:H - Losing mutual exclusion lets a second thread run ocfs2_expand_cache() against the already-converted union, copying live rb_node kernel heap pointers into c_block values that surface through mlog/tracepoints, and the resulting metadata-cache corruption is leverageable for further kernel memory disclosure.\nI:H - The spurious unlock releases a mutex held by another task, allowing unserialized rb-tree insertion, ci_num_cached/ci_flags corruption and orphaned kmem_cache objects in a region whose invariants are explicitly unchecked, i.e. attacker-influenced corruption of kernel heap state and of the clustered-uptodate metadata the filesystem trusts.\nA:H - The imbalance produces an immediate lockdep/DEBUG_MUTEXES \"bad unlock balance\" splat (panic under panic_on_warn) and, in production builds, reaches BUG() via mlog_bug_on_msg() in ocfs2_expand_cache(), the duplicate-insert BUG() in __ocfs2_insert_cache_tree(), or the ip_io_mutex assertion in ocfs2_clear_inode() \u2014 all kernel panics."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:40:44.001Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/5245f109b4afb6595360d4c180d483a6d2009a59"
        },
        {
          "url": "https://git.kernel.org/stable/c/9753bcb17b36c9add9b32c61766ddf8d2d161911"
        },
        {
          "url": "https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3"
        },
        {
          "url": "https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af"
        },
        {
          "url": "https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9"
        },
        {
          "url": "https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d"
        },
        {
          "url": "https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d"
        },
        {
          "url": "https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc"
        },
        {
          "url": "https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1"
        }
      ],
      "title": "ocfs2: remove unreasonable unlock in ocfs2_read_blocks",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-49965",
    "datePublished": "2024-10-21T18:02:16.407Z",
    "dateReserved": "2024-10-21T12:17:06.050Z",
    "dateUpdated": "2026-08-05T11:40:44.001Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-49965",
      "date": "2026-09-16",
      "epss": "0.00196",
      "percentile": "0.0957"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.4.204\", \"versionEndExcluding\": \"4.9\", \"matchCriteriaId\": \"24B4F282-4860-4914-A00E-37E79073E119\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.9.204\", \"versionEndExcluding\": \"4.14\", \"matchCriteriaId\": \"CAF7C57C-4624-476E-9DC5-B2376F1E4675\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.14.157\", \"versionEndExcluding\": \"4.19\", \"matchCriteriaId\": \"9DC95FF1-ED73-4CD5-9F88-C887FD9A5273\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.19.87\", \"versionEndExcluding\": \"4.20\", \"matchCriteriaId\": \"B897764C-25B8-458D-864B-0985FF8A323F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.10.227\", \"matchCriteriaId\": \"BD12FA67-D2AC-4EB0-BED4-7D4E94D30EF8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.168\", \"matchCriteriaId\": \"4D51C05D-455B-4D8D-89E7-A58E140B864C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.113\", \"matchCriteriaId\": \"D01BD22E-ACD1-4618-9D01-6116570BE1EE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.55\", \"matchCriteriaId\": \"E90B9576-56C4-47BC-AAB0-C5B2D438F5D0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.10.14\", \"matchCriteriaId\": \"4C16BCE0-FFA0-4599-BE0A-1FD65101C021\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.11\", \"versionEndExcluding\": \"6.11.3\", \"matchCriteriaId\": \"54D9C704-D679-41A7-9C40-10A6B1E7FFE9\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nocfs2: remove unreasonable unlock in ocfs2_read_blocks\\n\\nPatch series \\\"Misc fixes for ocfs2_read_blocks\\\", v5.\\n\\nThis series contains 2 fixes for ocfs2_read_blocks().  The first patch fix\\nthe issue reported by syzbot, which detects bad unlock balance in\\nocfs2_read_blocks().  The second patch fixes an issue reported by Heming\\nZhao when reviewing above fix.\\n\\n\\nThis patch (of 2):\\n\\nThere was a lock release before exiting, so remove the unreasonable unlock.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: eliminar el desbloqueo irrazonable en ocfs2_read_blocks Serie de parches \\\"Correcciones varias para ocfs2_read_blocks\\\", v5. Esta serie contiene 2 correcciones para ocfs2_read_blocks(). El primer parche corrige el problema informado por syzbot, que detecta un balance de desbloqueo incorrecto en ocfs2_read_blocks(). El segundo parche corrige un problema informado por Heming Zhao al revisar la correcci\\u00f3n anterior. Este parche (de 2): Hubo una liberaci\\u00f3n de bloqueo antes de salir, as\\u00ed que elimine el desbloqueo irrazonable.\"}]",
      "id": "CVE-2024-49965",
      "lastModified": "2024-11-08T16:15:36.353",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-10-21T18:15:17.593",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/5245f109b4afb6595360d4c180d483a6d2009a59\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/9753bcb17b36c9add9b32c61766ddf8d2d161911\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-667\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-49965\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-10-21T18:15:17.593\",\"lastModified\":\"2026-08-04T11:21:02.847\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nocfs2: remove unreasonable unlock in ocfs2_read_blocks\\n\\nPatch series \\\"Misc fixes for ocfs2_read_blocks\\\", v5.\\n\\nThis series contains 2 fixes for ocfs2_read_blocks().  The first patch fix\\nthe issue reported by syzbot, which detects bad unlock balance in\\nocfs2_read_blocks().  The second patch fixes an issue reported by Heming\\nZhao when reviewing above fix.\\n\\n\\nThis patch (of 2):\\n\\nThere was a lock release before exiting, so remove the unreasonable unlock.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: eliminar el desbloqueo irrazonable en ocfs2_read_blocks Serie de parches \\\"Correcciones varias para ocfs2_read_blocks\\\", v5. Esta serie contiene 2 correcciones para ocfs2_read_blocks(). El primer parche corrige el problema informado por syzbot, que detecta un balance de desbloqueo incorrecto en ocfs2_read_blocks(). El segundo parche corrige un problema informado por Heming Zhao al revisar la correcci\u00f3n anterior. Este parche (de 2): Hubo una liberaci\u00f3n de bloqueo antes de salir, as\u00ed que elimine el desbloqueo irrazonable.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/ocfs2/buffer_head_io.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6c150df9c2e80b5cf86f5a0d98beb7390ad63bfc\",\"lessThan\":\"5245f109b4afb6595360d4c180d483a6d2009a59\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"9753bcb17b36c9add9b32c61766ddf8d2d161911\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"3f1ca6ba5452d53c598a45d21267a2c0c221eef3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"f55a33fe0fb5274ef185fd61947cf142138958af\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"81aba693b129e82e11bb54f569504d943d018de9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"84543da867c967edffd5065fa910ebf56aaae49d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"df4f20fc3673cee11abf2c571987a95733cb638d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"39a88623af3f1c686bf6db1e677ed865ffe6fccc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"cf76c78595ca87548ca5e45c862ac9e0949c4687\",\"lessThan\":\"c03a82b4a0c935774afa01fd6d128b444fd930a1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"01f93d5e36753fc4d06ec67f05ce78c9c6f2dd56\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"65cbd1279f4b999d56a838344a30642db24cd215\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"97e1db17bc1ef4c2e1789bc9323c7be44fba53f8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.19.87\",\"lessThan\":\"4.19.323\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.4.204\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.9.204\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.157\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/ocfs2/buffer_head_io.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.20\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.323\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.285\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.227\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.168\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.113\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.55\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10.14\",\"lessThanOrEqual\":\"6.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.11.3\",\"lessThanOrEqual\":\"6.11.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-10-22T13:34:35.371630Z\",\"id\":\"CVE-2024-49965\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-667\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4.204\",\"versionEndExcluding\":\"4.9\",\"matchCriteriaId\":\"24B4F282-4860-4914-A00E-37E79073E119\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9.204\",\"versionEndExcluding\":\"4.14\",\"matchCriteriaId\":\"CAF7C57C-4624-476E-9DC5-B2376F1E4675\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14.157\",\"versionEndExcluding\":\"4.19\",\"matchCriteriaId\":\"9DC95FF1-ED73-4CD5-9F88-C887FD9A5273\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.87\",\"versionEndExcluding\":\"4.20\",\"matchCriteriaId\":\"B897764C-25B8-458D-864B-0985FF8A323F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.10.227\",\"matchCriteriaId\":\"BD12FA67-D2AC-4EB0-BED4-7D4E94D30EF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.168\",\"matchCriteriaId\":\"4D51C05D-455B-4D8D-89E7-A58E140B864C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.113\",\"matchCriteriaId\":\"D01BD22E-ACD1-4618-9D01-6116570BE1EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.55\",\"matchCriteriaId\":\"E90B9576-56C4-47BC-AAB0-C5B2D438F5D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.10.14\",\"matchCriteriaId\":\"4C16BCE0-FFA0-4599-BE0A-1FD65101C021\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.11\",\"versionEndExcluding\":\"6.11.3\",\"matchCriteriaId\":\"54D9C704-D679-41A7-9C40-10A6B1E7FFE9\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5245f109b4afb6595360d4c180d483a6d2009a59\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9753bcb17b36c9add9b32c61766ddf8d2d161911\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-13T15:08:20+00:00",
      "cve": "CVE-2024-49965",
      "id": "CVE-2024-49965",
      "initial_release_date": "2024-10-21T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ocfs2: remove unreasonable unlock in ocfs2_read_blocks",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-49965.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T01:08:24Z",
      "cve": "CVE-2024-49965",
      "id": "CVE-2024-49965",
      "initial_release_date": "2024-10-24T03:18:21Z",
      "product_status:known_affected": "497",
      "product_status:known_not_affected": "187",
      "product_status:recommended": "662",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-49965",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-49965.json",
      "version": "65"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:23:47.003Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-49965\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T13:34:35.371630Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T13:34:38.848Z\"}}], \"cna\": {\"title\": \"ocfs2: remove unreasonable unlock in ocfs2_read_blocks\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6c150df9c2e80b5cf86f5a0d98beb7390ad63bfc\", \"lessThan\": \"5245f109b4afb6595360d4c180d483a6d2009a59\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"9753bcb17b36c9add9b32c61766ddf8d2d161911\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"3f1ca6ba5452d53c598a45d21267a2c0c221eef3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"f55a33fe0fb5274ef185fd61947cf142138958af\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"81aba693b129e82e11bb54f569504d943d018de9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"84543da867c967edffd5065fa910ebf56aaae49d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"df4f20fc3673cee11abf2c571987a95733cb638d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"39a88623af3f1c686bf6db1e677ed865ffe6fccc\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"cf76c78595ca87548ca5e45c862ac9e0949c4687\", \"lessThan\": \"c03a82b4a0c935774afa01fd6d128b444fd930a1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"01f93d5e36753fc4d06ec67f05ce78c9c6f2dd56\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"65cbd1279f4b999d56a838344a30642db24cd215\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"97e1db17bc1ef4c2e1789bc9323c7be44fba53f8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4.19.87\", \"lessThan\": \"4.19.323\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.4.204\", \"lessThan\": \"4.5\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.9.204\", \"lessThan\": \"4.10\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.14.157\", \"lessThan\": \"4.15\", \"versionType\": \"semver\"}], \"programFiles\": [\"fs/ocfs2/buffer_head_io.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.20\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.20\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.323\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.285\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.227\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.168\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.113\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.55\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.14\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/ocfs2/buffer_head_io.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/5245f109b4afb6595360d4c180d483a6d2009a59\"}, {\"url\": \"https://git.kernel.org/stable/c/9753bcb17b36c9add9b32c61766ddf8d2d161911\"}, {\"url\": \"https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3\"}, {\"url\": \"https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af\"}, {\"url\": \"https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9\"}, {\"url\": \"https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d\"}, {\"url\": \"https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d\"}, {\"url\": \"https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc\"}, {\"url\": \"https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nocfs2: remove unreasonable unlock in ocfs2_read_blocks\\n\\nPatch series \\\"Misc fixes for ocfs2_read_blocks\\\", v5.\\n\\nThis series contains 2 fixes for ocfs2_read_blocks().  The first patch fix\\nthe issue reported by syzbot, which detects bad unlock balance in\\nocfs2_read_blocks().  The second patch fixes an issue reported by Heming\\nZhao when reviewing above fix.\\n\\n\\nThis patch (of 2):\\n\\nThere was a lock release before exiting, so remove the unreasonable unlock.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.323\", \"versionStartIncluding\": \"4.19.87\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.285\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.227\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.168\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.113\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.55\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.14\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.3\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"4.20\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.4.204\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.9.204\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.14.157\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:54:10.835Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-49965\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:54:10.835Z\", \"dateReserved\": \"2024-10-21T12:17:06.050Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T18:02:16.407Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.