[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-38583":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":24,"references":26,"score":37,"epss_score":38,"epss_percentile":39,"is_kev":19,"cisa_kev_date_added":40,"cisa_kev_due_date":40,"cisa_ssvc":41,"attack_mappings":51,"exploits":58},53020,"CVE-2024-38583","EUVD-2024-37446","In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix use-after-free of timer for log writer thread\n\nPatch series \"nilfs2: fix log writer related issues\".\n\nThis bug fix series covers three nilfs2 log writer-related issues,\nincluding a timer use-after-free issue and potential deadlock issue on\nunmount, and a potential freeze issue in event synchronization found\nduring their analysis.  Details are described in each commit log.\n\n\nThis patch (of 3):\n\nA use-after-free issue has been reported regarding the timer sc_timer on\nthe nilfs_sc_info structure.\n\nThe problem is that even though it is used to wake up a sleeping log\nwriter thread, sc_timer is not shut down until the nilfs_sc_info structure\nis about to be freed, and is used regardless of the thread's lifetime.\n\nFix this issue by limiting the use of sc_timer only while the log writer\nthread is alive.","2024-06-19T14:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-416",[23],"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",[25],"Linux Linux Kernel",[27,28,29,30,31,32,33,34,35,36],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F2f12b2c03c5dae1a0de0a9e5853177e3d6eee3c6","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F67fa90d4a2ccd9ebb0e1e168c7d0b5d0cf3c7148","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F68e738be5c518fc3c4e9146b66f67c8fee0135fb","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F822ae5a8eac30478578a75f7e064f0584931bf2d","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F82933c84f188dcfe89eb26b0b48ab5d1ca99d164","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F86a30d6302deddb9fb97ba6fc4b04d0e870b582a","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fe65ccf3a4de4f0c763d94789615b83e11f204438","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ff5d4e04634c9cf68bdf23de08ada0bb92e8befe7","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Ff9186bba4ea282b07293c1c892441df3a5441cb0","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F06\u002Fmsg00020.html",0.39,0.00258,0.16593,null,{"timestamp":42,"automatable":43,"tech_impact":44,"exploitation":45,"cisa_decision":46,"cisa_remediation_timeline":50},"2024-09-10T17:13:56.689885Z","no","partial","none",{"vector":47,"decision":48,"priority":49},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T13:38:55.015631\u002F","track_star","medium","60D",[52],{"name":53,"source":54,"tactics":55,"technique_id":57},"Exploitation for Privilege Escalation","attack_vector",[56],"privilege-escalation","T1068",[]]