CVE-2024-39470: eventfs: Fix a possible null pointer dereference in eventfs_find_events()
In the Linux kernel, the following vulnerability has been resolved:
eventfs: Fix a possible null pointer dereference in eventfsfindevents()
In function eventfsfindevents,there is a potential null pointer that may be caused by calling updateeventsattr which will perform some operations on the members of the ei struct when ei is NULL.
Hence,When ei->isfreed is set,return NULL directly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39470?
CVE-2024-39470 is classified as a medium-severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-39470?
To mitigate CVE-2024-39470, upgrade to a patched version of the Linux kernel, such as 5.10.223-1 or 6.1.123-1.
What does CVE-2024-39470 affect?
CVE-2024-39470 affects the eventfs component of the Linux kernel, leading to a potential null pointer dereference.
Which versions of the Linux kernel are impacted by CVE-2024-39470?
CVE-2024-39470 affects Linux kernel versions between 6.6.18 and 6.6.34, as well as versions between 6.8 and 6.9.5.
What is the main issue caused by CVE-2024-39470?
The main issue posed by CVE-2024-39470 is the potential for a null pointer dereference in the eventfs_find_events function.