5.5
CVE-2024-48881
- EPSS 0.25%
- Veröffentlicht 11.01.2025 13:15:23
- Zuletzt bearbeitet 03.11.2025 21:16:30
- CVE-Watchlists
- Unerledigt
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
In the Linux kernel, the following vulnerability has been resolved:
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in
node allocations") leads a NULL pointer deference in cache_set_flush().
1721 if (!IS_ERR_OR_NULL(c->root))
1722 list_add(&c->root->list, &c->btree_cache);
>From the above code in cache_set_flush(), if previous registration code
fails before allocating c->root, it is possible c->root is NULL as what
it is initialized. __bch_btree_node_alloc() never returns NULL but
c->root is possible to be NULL at above line 1721.
This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.19.291 < 4.20
Linux ≫ Linux Kernel Version >= 5.4.251 < 5.4.287
Linux ≫ Linux Kernel Version >= 5.10.188 < 5.10.231
Linux ≫ Linux Kernel Version >= 5.15.121 < 5.15.174
Linux ≫ Linux Kernel Version >= 6.1.39 < 6.1.120
Linux ≫ Linux Kernel Version >= 6.4.4 < 6.6.66
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.5
Linux ≫ Linux Kernel Version6.13 Updaterc1
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.156 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
https://git.kernel.org/stable/c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2
https://git.kernel.org/stable/c/4379c5828492a4c2a651c8f826a01453bd2b80b0
https://git.kernel.org/stable/c/5202391970ffbf81975251b3526b890ba027b715
https://git.kernel.org/stable/c/5e0e913624bcd24f3de414475018d3023f060ee1
https://git.kernel.org/stable/c/b2e382ae12a63560fca35050498e19e760adf8c0
https://git.kernel.org/stable/c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667
https://git.kernel.org/stable/c/fb5fee35bdd18316a84b5f30881a24e1415e1464
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html