Answer in brief
CVE-2024-49855 records a Unknown severity vulnerability in nbd: fix race between timeout and normal completion. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 5.19 | Not reported |
| Linux/Linuxgeneric | >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <9c25faf72d780a9c71081710cd48759d61ff6e9b || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <6e73b946a379a1dfbb62626af93843bdfb53753d || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <5236ada8ebbd9e7461f17477357582f5be4f46f7 || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <c9ea57c91f03bcad415e1a20113bdb2077bcf990 || cdf62c535a9bfd5ff0eef4b91669da39d8abc0c3 || 5171ef20bae852ff38f4cfdb368bcdcc744776d0 || >=5.17.15 <5.18 || >=5.18.4 <5.19 | 9c25faf72d780a9c71081710cd48759d61ff6e9b, 6e73b946a379a1dfbb62626af93843bdfb53753d, 5236ada8ebbd9e7461f17477357582f5be4f46f7, 9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc, c9ea57c91f03bcad415e1a20113bdb2077bcf990, 5.18, 5.19 |
Published upstream
Oct 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2024-49855 records a Unknown severity vulnerability in nbd: fix race between timeout and normal completion. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 5.19 | Not reported |
| Linux/Linuxgeneric | >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <9c25faf72d780a9c71081710cd48759d61ff6e9b || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <6e73b946a379a1dfbb62626af93843bdfb53753d || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <5236ada8ebbd9e7461f17477357582f5be4f46f7 || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc || >=2895f1831e911ca87d4efdf43e35eb72a0c7e66e <c9ea57c91f03bcad415e1a20113bdb2077bcf990 || cdf62c535a9bfd5ff0eef4b91669da39d8abc0c3 || 5171ef20bae852ff38f4cfdb368bcdcc744776d0 || >=5.17.15 <5.18 || >=5.18.4 <5.19 | 9c25faf72d780a9c71081710cd48759d61ff6e9b, 6e73b946a379a1dfbb62626af93843bdfb53753d, 5236ada8ebbd9e7461f17477357582f5be4f46f7, 9a74c3e6c0d686c26ba2aab66d15ddb89dc139cc, c9ea57c91f03bcad415e1a20113bdb2077bcf990, 5.18, 5.19 |
Published upstream
Oct 21, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: nbd: fix race between timeout and normal completion If request timetout is handled by nbd_requeue_cmd(), normal completion has to be stopped for avoiding to complete this requeued request, other use-after-free can be triggered. Fix the race by clearing NBD_CMD_INFLIGHT in nbd_requeue_cmd(), meantime make sure that cmd->lock is grabbed for clearing the flag and the requeue.
Quoted source text, attributed separately from HOL analysis.