CVE-2024-49965: linux kernel — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock.

Is your site exposed to CVE-2024-49965?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-667 CWE-667

Affected Products

Vendor	Product	Versions
linux	linux_kernel	4.4.204 — 4.9
linux	linux_kernel	4.9.204 — 4.14
linux	linux_kernel	4.14.157 — 4.19
linux	linux_kernel	4.19.87 — 4.20
linux	linux_kernel	4.20 — 5.10.227
linux	linux_kernel	5.11 — 5.15.168
linux	linux_kernel	5.16 — 6.1.113
linux	linux_kernel	6.2 — 6.6.55
linux	linux_kernel	6.7 — 6.10.14
linux	linux_kernel	6.11 — 6.11.3

References

Advisories & Patches

https://git.kernel.org/stable/c/39a88623af3f1c686bf6db1e677ed865ffe6fccc https://git.kernel.org/stable/c/3f1ca6ba5452d53c598a45d21267a2c0c221eef3 https://git.kernel.org/stable/c/81aba693b129e82e11bb54f569504d943d018de9 https://git.kernel.org/stable/c/84543da867c967edffd5065fa910ebf56aaae49d https://git.kernel.org/stable/c/c03a82b4a0c935774afa01fd6d128b444fd930a1 https://git.kernel.org/stable/c/df4f20fc3673cee11abf2c571987a95733cb638d https://git.kernel.org/stable/c/f55a33fe0fb5274ef185fd61947cf142138958af

Other References

https://git.kernel.org/stable/c/5245f109b4afb6595360d4c180d483a6d2009a59 https://git.kernel.org/stable/c/9753bcb17b36c9add9b32c61766ddf8d2d161911 https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Frequently Asked Questions

What is CVE-2024-49965? +

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock. It has a CVSS v3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-49965? +

CVE-2024-49965 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-49965? +

CVE-2024-49965 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-49965? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-1221

A Zigbee Radio Co-Processor (RCP), which is using SiLabs EmberZNet Zigbee stack, was unable to send messages to the host …

CVE-2025-10151

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: …

CVE-2026-54906 9.8

concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired …

CVE-2026-43215 8.8

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used to …

CVE-2026-31629 8.8

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED checks In nfc_llcp_recv_hdlc() …

CVE-2026-62426 8.8

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the …

CVE-2024-49965