CVE-2024-48881CWE-476

CVE-2024-48881

Medium · published January 11, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in

node allocations") leads a NULL pointer deference in cache_set_flush().

1721 if (!IS_ERR_OR_NULL(c->root))

1722 list_add(&c->root->list, &c->btree_cache);

>From the above code in cache_set_flush(), if previous registration code

fails before allocating c->root, it is possible c->root is NULL as what

it is initialized. __bch_btree_node_alloc() never returns NULL but

c->root is possible to be NULL at above line 1721.

This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-01-11T18:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.291, < 4.204.20
linux/linux_kernel≥ 5.4.251, < 5.4.2875.4.287
linux/linux_kernel≥ 5.10.188, < 5.10.2315.10.231
linux/linux_kernel≥ 5.15.121, < 5.15.1745.15.174
linux/linux_kernel≥ 6.1.39, < 6.1.1206.1.120
linux/linux_kernel≥ 6.4.4, < 6.6.666.6.66
linux/linux_kernel≥ 6.7, < 6.12.56.12.5
linux/linux_kernelall versions—
References (11)
EPSS history
Timeline
  • 11 JAN 12:25Z
    bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
    cvelistv5