CVE-2024-42235: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
In the Linux kernel, the following vulnerability has been resolved:
s390/mm: Add NULL pointer check to crsttablefree() basecrstfree()
crsttablefree() used to work with NULL pointers before the conversion to ptdescs. Since crsttablefree() can be called with a NULL pointer (error handling in crsttableupgrade() add an explicit check.
Also add the same check to basecrstfree() for consistency reasons.
In real life this should not happen, since order two GFPKERNEL allocations will not fail, unless FAILPAGEALLOC is enabled and used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42235?
The severity of CVE-2024-42235 has been classified as moderate, given its impact on the Linux kernel's NULL pointer handling.
How do I fix CVE-2024-42235?
To address CVE-2024-42235, update to the latest stable version of the Linux kernel, such as 5.10.223-1 or 6.12.11-1.
Which versions of the Linux kernel are affected by CVE-2024-42235?
CVE-2024-42235 affects Linux kernel versions between 6.6 and 6.6.41, as well as 6.7 to 6.9.10.
What specific function is impacted by CVE-2024-42235?
CVE-2024-42235 specifically impacts the crst_table_free() function in the Linux kernel.
Is CVE-2024-42235 resolved in upcoming kernel versions?
CVE-2024-42235 has been resolved in recent kernel patches released for the affected versions.