CVE-2024-41077

Description

In the Linux kernel, the following vulnerability has been resolved: null_blk: fix validation of block size Block size should be between 512 and PAGE_SIZE and be a power of 2. The current check does not validate this, so update the check. Without this patch, null_blk would Oops due to a null pointer deref when loaded with bs=1536 [1]. [axboe: remove unnecessary braces and != 0 check]

Reserved 2024-07-12 | Published 2024-07-29 | Updated 2024-12-19 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9625afe1dd4a158a14bb50f81af9e2dac634c0b1
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9b873bdaae64bddade9d8c6df23c8a31948d47d0
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2772ed2fc075eef7df3789906fc9dae01e4e132e
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 08f03186b96e25e3154916a2e70732557c770ea7
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before f92409a9da02f27d05d713bff5f865e386cef9b3
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c462ecd659b5fce731f1d592285832fd6ad54053
affected

Default status
affected

5.10.223
unaffected

5.15.164
unaffected

6.1.101
unaffected

6.6.42
unaffected

6.9.11
unaffected

6.10
unaffected

References

git.kernel.org/...c/9625afe1dd4a158a14bb50f81af9e2dac634c0b1

git.kernel.org/...c/9b873bdaae64bddade9d8c6df23c8a31948d47d0

git.kernel.org/...c/2772ed2fc075eef7df3789906fc9dae01e4e132e

git.kernel.org/...c/08f03186b96e25e3154916a2e70732557c770ea7

git.kernel.org/...c/f92409a9da02f27d05d713bff5f865e386cef9b3

git.kernel.org/...c/c462ecd659b5fce731f1d592285832fd6ad54053

cve.org (CVE-2024-41077)

nvd.nist.gov (CVE-2024-41077)

Download JSON