CVE-2024-49965: ocfs2: remove unreasonable unlock in ocfs2_read_blocks

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-21 · updated 2026-08-04
Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove unreasonable unlock in ocfs2_read_blocks Patch series "Misc fixes for ocfs2_read_blocks", v5. This series contains 2 fixes for ocfs2_read_blocks(). The first patch fix the issue reported by syzbot, which detects bad unlock balance in ocfs2_read_blocks(). The second patch fixes an issue reported by Heming Zhao when reviewing above fix. This patch (of 2): There was a lock release before exiting, so remove the unreasonable unlock.

Affected products

Linux kernel: from 4.4.204 before 4.9; from 4.9.204 before 4.14; from 4.14.157 before 4.19; from 4.19.87 before 4.20; from 4.20 before 5.10.227; from 5.11 before 5.15.168 — fixed in 4.14, 4.19, 4.20, 4.9, 5.10.227, 5.15.168

How to fix

Upgrade to a fixed version: Linux kernel 4.14, 4.19, 4.20, 4.9. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-49965 or the next vulnerability affects your stack