In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush lock to provide exclusion against gfs2_log_flush(). In gfs2_log_flush(), check if sdp->sd_jdesc is non-NULL before dereferencing it. Otherwise, we could run into a NULL pointer dereference when outstanding glock work races with an unmount (glock_work_func -> run_queue -> do_xmote -> inode_go_sync -> gfs2_log_flush).
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024072955-CVE-2024-42079-a13c@gregkh/T
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 2301716]
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2024:8162 https://access.redhat.com/errata/RHSA-2024:8162
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:8870 https://access.redhat.com/errata/RHSA-2024:8870
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2024:8856 https://access.redhat.com/errata/RHSA-2024:8856