PT-2024-29250 · Linux+6 · Linux Kernel+6
Andreas Hindborg
·
Published
2024-06-03
·
Updated
2025-09-29
·
CVE-2024-41077
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.43
Description
The issue is related to the null blk module in the Linux kernel, where the block size validation is incorrect. The block size should be between 512 and PAGE SIZE and be a power of 2. Without the patch, null blk would result in a null pointer dereference when loaded with a block size of 1536.
Recommendations
Update to Linux kernel version 6.6.43 or later to resolve the issue.
As a temporary workaround, consider avoiding the use of block sizes that are not a power of 2 and are between 512 and PAGE SIZE to minimize the risk of exploitation.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu