CVE-2024-48881: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
In the Linux kernel, the following vulnerability has been resolved:
bcache: revert replacing ISERRORNULL with ISERR again
Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cachesetflush().
1721 if (!ISERRORNULL(c->root)) 1722 listadd(&c->root->list, &c->btreecache);
>From the above code in cachesetflush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. bchbtreenodealloc() never returns NULL but c->root is possible to be NULL at above line 1721.
This patch replaces ISERR() by ISERRORNULL() to fix this.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48881?
CVE-2024-48881 has a medium severity rating due to potential null pointer dereference issues.
What versions of the Linux kernel are affected by CVE-2024-48881?
CVE-2024-48881 affects multiple versions of the Linux kernel, specifically 4.19.291 to 4.20, 5.4.251 to 5.4.287, 5.10.188 to 5.10.231, 5.15.121 to 5.15.174, 6.1.39 to 6.1.120, 6.4.4 to 6.6.66, and 6.7 to 6.12.5.
How do I fix CVE-2024-48881?
To fix CVE-2024-48881, update to the latest patched version of the Linux kernel that addresses this vulnerability.
What exploit methods are associated with CVE-2024-48881?
CVE-2024-48881 could potentially be exploited to cause a denial-of-service through null pointer dereference.
What is the impact of CVE-2024-48881 on system performance?
The impact of CVE-2024-48881 may lead to system instability and potential crashes, affecting overall performance.