CVE-2024-41077: null_blk: fix validation of block size
In the Linux kernel, the following vulnerability has been resolved:
nullblk: fix validation of block size
Block size should be between 512 and PAGESIZE and be a power of 2. The current check does not validate this, so update the check.
Without this patch, nullblk would Oops due to a null pointer deref when loaded with bs=1536 [1].
[axboe: remove unnecessary braces and != 0 check]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41077?
CVE-2024-41077 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-41077?
To fix CVE-2024-41077, update the Linux kernel to versions 5.10.223, 5.15.164, 6.1.101, 6.6.42, or later.
What systems are affected by CVE-2024-41077?
CVE-2024-41077 affects various distributions of the Linux kernel, including specific versions listed in the advisory.
What impact does CVE-2024-41077 have on system performance?
CVE-2024-41077 could potentially lead to system instability or crashes if the block size validation is not properly enforced.
Is there a workaround for CVE-2024-41077?
Currently, the recommended solution for CVE-2024-41077 is to apply the available kernel updates, as there are no official workarounds.