CVE-2024-47746

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set

This may be a typo. The comment has said shared locks are not allowed when this bit is set. If using shared lock, the wait in `fuse_file_cached_io_open` may be forever.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

VendorProductVersions
LinuxLinux>= 205c1d8026835746d8597e1aa70c370e014e83fa, < fa4890bd8237e5a1e7428acd7328729db2703b23; >= 205c1d8026835746d8597e1aa70c370e014e83fa, < 4e181761ffec67307157a7e8a78d58ee4130cf00; >= 205c1d8026835746d8597e1aa70c370e014e83fa, < 2f3d8ff457982f4055fe8f7bf19d3821ba22c376
LinuxLinux6.9

References

Timeline

Published
Oct 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-477477.0In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to RacCVE-2024-477487.8In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to callCVE-2024-477495.5In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid The lookup_atid() functioCVE-2024-47755.9An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and unCVE-2024-477507.8In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is frCVE-2024-477517.8In the Linux kernel, the following vulnerability has been resolved: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() Within kiriCVE-2024-477525.5In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning FixCVE-2024-477535.5In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning Fix CVE-2024-477545.5In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warninCVE-2024-477565.5In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This codCVE-2024-477577.1In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The functCVE-2024-477588.8GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can u
CVE-2024-47746: Medium severity, CVSS 5.5 | Vulnix