https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 20:43:15 +0000 https://vulnerability.circl.lu/vuln/cve-2024-38580 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>epoll: be better about file lifetimes</p> <p>epoll can call out to vfs_poll() with a file pointer that may race with the last &#39;fput()&#39;. That would make f_count go down to zero, and while the ep-&gt;mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won&#39;t actually get a reference to the file any more: it&#39;s dead regardless.</p> <p>Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>epoll: be better about file lifetimes</p> <p>epoll can call out to vfs_poll() with a file pointer that may race with the last &#39;fput()&#39;. That would make f_count go down to zero, and while the ep-&gt;mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won&#39;t actually get a reference to the file any more: it&#39;s dead regardless.</p> <p>Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.</p> https://vulnerability.circl.lu/vuln/cve-2024-38580