CVE-2024-48881

Description

In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush(). 1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache); >From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721. This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.

Reserved 2025-01-09 | Published 2025-01-11 | Updated 2025-01-20 | Assigner Linux

Product status

Default status
unaffected

0729029e647234fa1a94376b6edffec5c2cd75f6 before 4379c5828492a4c2a651c8f826a01453bd2b80b0
affected

db9439cef0b5efccf8021fe89f4953e0f901e85b before 336e30f32ae7c043fde0f6fa21586ff30bea9fe2
affected

991e9c186a8ac6ab272a86e0ddc6f9733c38b867 before fb5fee35bdd18316a84b5f30881a24e1415e1464
affected

68118c339c6e1e16ae017bef160dbe28a27ae9c8 before 5202391970ffbf81975251b3526b890ba027b715
affected

028ddcac477b691dd9205c92f991cc15259d033e before cc05aa2c0117e20fa25a3c0d915f98b8f2e78667
affected

028ddcac477b691dd9205c92f991cc15259d033e before 5e0e913624bcd24f3de414475018d3023f060ee1
affected

028ddcac477b691dd9205c92f991cc15259d033e before b2e382ae12a63560fca35050498e19e760adf8c0
affected

Default status
affected

6.5
affected

Any version before 6.5
unaffected

5.4.287
unaffected

5.10.231
unaffected

5.15.174
unaffected

6.1.120
unaffected

6.6.66
unaffected

6.12.5
unaffected

6.13
unaffected

References

git.kernel.org/...c/4379c5828492a4c2a651c8f826a01453bd2b80b0

git.kernel.org/...c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2

git.kernel.org/...c/fb5fee35bdd18316a84b5f30881a24e1415e1464

git.kernel.org/...c/5202391970ffbf81975251b3526b890ba027b715

git.kernel.org/...c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667

git.kernel.org/...c/5e0e913624bcd24f3de414475018d3023f060ee1

git.kernel.org/...c/b2e382ae12a63560fca35050498e19e760adf8c0

cve.org (CVE-2024-48881)

nvd.nist.gov (CVE-2024-48881)

Download JSON