Medium · published February 28, 2024
In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Fix null pointer dereference in svc_rqst_free()
When alloc_pages_node() returns null in svc_rqst_alloc(), the
null rq_scratch_page pointer will be dereferenced when calling
put_page() in svc_rqst_free(). Fix it by adding a null check.
Addresses-Coverity: ("Dereference after null check")
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 5.10.221 | 5.10.221 |
| linux/linux_kernel | ≥ 5.11, < 5.11.22 | 5.11.22 |
| linux/linux_kernel | ≥ 5.12, < 5.12.5 | 5.12.5 |