Orta CVSS 4.7

CVE-2024-26878: Linux Kernel: yarış durumu

Yayın: 17 Nisan 2024 14:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) .... If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered. So let's fix it by using a temporary pointer to avoid this issue.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,19 (yüzdelik 9)
CWE: CWE-362
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	—	4.19.311
linux-linux-kernel	4.20	—	5.4.273
linux-linux-kernel	5.5	—	5.10.214
linux-linux-kernel	5.11	—	5.15.153
linux-linux-kernel	5.16	—	6.1.83
linux-linux-kernel	6.2	—	6.6.23
linux-linux-kernel	6.7	—	6.7.11
linux-linux-kernel	6.8	—	6.8.2
debian-debian-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları