{"id":"CVE-2021-47254","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: Fix use-after-free in gfs2_glock_shrink_scan\n\nThe GLF_LRU flag is checked under lru_lock in gfs2_glock_remove_from_lru() to\nremove the glock from the lru list in __gfs2_glock_put().\n\nOn the shrink scan path, the same flag is cleared under lru_lock but because\nof cond_resched_lock(&lru_lock) in gfs2_dispose_glock_lru(), progress on the\nput side can be made without deleting the glock from the lru list.\n\nKeep GLF_LRU across the race window opened by cond_resched_lock(&lru_lock) to\nensure correct behavior on both sides - clear GLF_LRU after list_del under\nlru_lock.","modified":"2026-03-15T22:00:14.324197Z","published":"2024-05-21T15:15:14.233Z","related":["SUSE-SU-2024:1979-1","SUSE-SU-2024:1983-1","SUSE-SU-2024:2010-1","SUSE-SU-2024:2183-1","SUSE-SU-2024:2184-1","SUSE-SU-2024:2185-1"],"references":[{"type":"FIX","url":"https://git.kernel.org/stable/c/094bf5670e762afa243d2c41a5c4ab71c7447bf4"},{"type":"FIX","url":"https://git.kernel.org/stable/c/1ab19c5de4c537ec0d9b21020395a5b5a6c059b2"},{"type":"FIX","url":"https://git.kernel.org/stable/c/38ce329534500bf4ae71f81df6a37a406cf187b4"},{"type":"FIX","url":"https://git.kernel.org/stable/c/86fd5b27db743a0ce0cc245e3a34813b2aa6ec1d"},{"type":"FIX","url":"https://git.kernel.org/stable/c/92869945cc5b78ee8a1ef90336fe070893e3458a"},{"type":"FIX","url":"https://git.kernel.org/stable/c/a61156314b66456ab6a291ed5deba1ebd002ab3c"},{"type":"FIX","url":"https://git.kernel.org/stable/c/e87ef30fe73e7e10d2c85bdcc778dcec24dca553"},{"type":"FIX","url":"https://git.kernel.org/stable/c/0364742decb0f02bc183404868b82896f7992595"}],"affected":[{"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"4.4.181"},{"fixed":"4.4.274"}]},{"events":[{"introduced":"4.9.180"},{"fixed":"4.9.274"}]},{"events":[{"introduced":"4.14.123"},{"fixed":"4.14.238"}]},{"events":[{"introduced":"4.19.47"},{"fixed":"4.19.196"}]},{"events":[{"introduced":"5.0.20"},{"fixed":"5.1"}]},{"events":[{"introduced":"5.1.6"},{"fixed":"5.4.127"}]},{"events":[{"introduced":"5.5"},{"fixed":"5.10.45"}]},{"events":[{"introduced":"5.11"},{"fixed":"5.12.12"}]},{"events":[{"introduced":"0"},{"last_affected":"5.13-rc1"}]},{"events":[{"introduced":"0"},{"last_affected":"5.13-rc2"}]},{"events":[{"introduced":"0"},{"last_affected":"5.13-rc3"}]},{"events":[{"introduced":"0"},{"last_affected":"5.13-rc4"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47254.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}