In the Linux kernel, the following vulnerability has been resolved:

ima: Fix use-after-free on a dentry's dname.name

->d_name.name can change on rename and the earlier value can be freed;
there are conditions sufficient to stabilize it (->d_lock on dentry,
->d_lock on its parent, ->i_rwsem exclusive on the parent's inode,
rename_lock), but none of those are met at any of the sites. Take a stable
snapshot of the name instead.

Subscriptions

Vendors Products
Debian Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4008-1 linux-6.1 security update
Debian DLA Debian DLA DLA-4178-1 linux security update
Debian DSA Debian DSA DSA-5731-1 linux security update
Ubuntu USN Ubuntu USN USN-6999-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6999-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7004-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7005-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7005-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7008-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7022-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7022-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7022-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7029-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7069-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7069-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7110-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7119-1 Linux kernel (IoT) vulnerabilities
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 06 Jan 2026 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
CPEs cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux

Mon, 03 Nov 2025 22:30:00 +0000

Type Values Removed Values Added
References

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Thu, 13 Mar 2025 12:30:00 +0000


Sat, 14 Dec 2024 21:00:00 +0000


Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-11-03T21:56:11.179Z

Reserved: 2024-06-25T14:23:23.748Z

Link: CVE-2024-39494

cve-icon Vulnrichment

Updated: 2024-08-02T04:26:15.999Z

cve-icon NVD

Status : Analyzed

Published: 2024-07-12T13:15:12.113

Modified: 2026-01-06T15:06:55.657

Link: CVE-2024-39494

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-12T00:00:00Z

Links: CVE-2024-39494 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses