CVE-2024-49877: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix possible null-ptr-deref in ocfs2setbufferuptodate
When doing cleanup, if flags without OCFS2BHREADAHEAD, it may trigger NULL pointer dereference in the following ocfs2setbufferuptodate() if bh is NULL.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49877?
CVE-2024-49877 has a severity rating that indicates it could lead to a potential NULL pointer dereference in the Linux kernel.
How do I fix CVE-2024-49877?
To fix CVE-2024-49877, update to the latest versions of the Linux kernel that contain the patch for this vulnerability.
What systems are affected by CVE-2024-49877?
CVE-2024-49877 affects multiple versions of the Linux kernel, particularly versions between 4.4.204 and 6.11.3.
Is CVE-2024-49877 a remote vulnerability?
CVE-2024-49877 is not classified as a remote vulnerability, but it can be exploited if an application triggers the condition leading to a NULL pointer dereference.
What are the available remedies for CVE-2024-49877?
Remedies for CVE-2024-49877 include specific patched Linux kernel versions such as 6.1.123-1, 6.1.128-1, and various Debian package updates.