CVE-2024-58058: ubifs: skip dumping tnc tree when zroot is null
In the Linux kernel, the following vulnerability has been resolved:
ubifs: skip dumping tnc tree when zroot is null
Clearing slab cache will free all znode in memory and make c->zroot.znode = NULL, then dumping tnc tree will access c->zroot.znode which cause null pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58058?
CVE-2024-58058 has been assigned a CVSS score indicating it as a medium severity vulnerability.
How do I fix CVE-2024-58058?
To mitigate CVE-2024-58058, it is recommended to update to the latest patched version of the Linux kernel.
What systems are affected by CVE-2024-58058?
CVE-2024-58058 affects all supported versions of the Linux kernel that utilize the ubifs file system.
What could happen if CVE-2024-58058 is exploited?
Exploitation of CVE-2024-58058 could lead to system crashes or potential denial of service due to null pointer dereferencing.
When was CVE-2024-58058 published?
CVE-2024-58058 was published on October 10, 2024.