CVE-2024-47705: block: fix potential invalid pointer dereference in blk_add_partition
In the Linux kernel, the following vulnerability has been resolved:
block: fix potential invalid pointer dereference in blkaddpartition
The blkaddpartition() function initially used a single if-condition (ISERR(part)) to check for errors when adding a partition. This was modified to handle the specific case of -ENXIO separately, allowing the function to proceed without logging the error in this case. However, this change unintentionally left a path where mdautodetectdev() could be called without confirming that part is a valid pointer.
This commit separates the error handling logic by splitting the initial if-condition, improving code readability and handling specific error scenarios explicitly. The function now distinguishes the general error case from -ENXIO without altering the existing behavior of mdautodetectdev() calls.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47705?
CVE-2024-47705 has a severity level categorized as high due to the potential for invalid pointer dereference.
How do I fix CVE-2024-47705?
To fix CVE-2024-47705, update the Linux kernel to a version that includes the patch, such as 6.1.123-1 or later.
What versions of the Linux kernel are affected by CVE-2024-47705?
CVE-2024-47705 affects multiple Linux kernel versions from 5.5 up to 6.11.2.
Is CVE-2024-47705 already patched in the latest kernel releases?
Yes, CVE-2024-47705 has been patched in the latest kernel releases, including versions like 6.1.123-1.
What consequences can arise if CVE-2024-47705 is exploited?
Exploitation of CVE-2024-47705 could lead to system instability or potential crashes due to invalid memory access.