CVE-2024-40951

ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()

bdev->bd_super has been removed and commit 8887b94d9322 change the usage

from bdev->bd_super to b_assoc_map->host->i_sb. Since ocfs2 hasn't set

bh->b_assoc_map, it will trigger NULL pointer dereference when calling

into ocfs2_abort_trigger().

Actually this was pointed out in history, see commit 74e364ad1b13. But

I've made a mistake when reviewing commit 8887b94d9322 and then

re-introduce this regression.

Since we cannot revive bdev in buffer head, so fix this issue by

initializing all types of ocfs2 triggers when fill super, and then get the

specific ocfs2 trigger from ocfs2_caching_info when access journal.

[[email protected]: v2]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Published
2024-07-12T12:31Z
EPSS history
Timeline
  • 12 JUL 12:31Z
    ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
    cvelistv5