CVE-2023-6915: Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c

First published: Mon Dec 18 2023(Updated: )

A Null pointer de-reference problem was found in ida_free in lib/idr.c file when it calls the xas_load function and returns a null value, assigning NULL to the bitmap variable. Therefore, `if (xa_is_value(bitmap))` will fail and jump to the `else` branch. However, in the else branch, the statement `if (!test_bit(bit, bitmap-&gt;bitmap))` references the member of bitmap, which triggers a null pointer dereference vulnerability. Reference: <a href="https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a">https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a</a>

Credit: secalert@redhat.com secalert@redhat.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/title
• agent/type
• agent/first-publish-date
• agent/weakness
• collector/epss-latest
• source/FIRST
• agent/epss
• agent/severity
• agent/remedy
• agent/description
• agent/author
• collector/nvd-cve
• source/NVD
• agent/software-canonical-lookup
• collector/launchpad-cve
• source/Launchpad
• agent/event
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2023-6915
• agent/references
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• collector/usn-cve
• source/Ubuntu
• agent/tags
• collector/security-tracker-debian
• source/Debian
• agent/softwarecombine
• collector/nvd-api
• vendor/linux
• canonical/linux linux kernel
• version/linux linux kernel/6.7-rc7
• version/linux linux kernel/6.7-rc8
• vendor/redhat
• canonical/redhat enterprise linux
• version/redhat enterprise linux/8.0
• version/redhat enterprise linux/9.0
• package-manager/ubuntu
• package-manager/debian