PT-2024-32735 · Linux+2 · Linux Kernel+2

Shinichiro Kawasaki

·

Published

2024-08-16

·

Updated

2025-02-28

·

CVE-2024-47680

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises from the Linux kernel's handling of discard support for conventional zones on zoned block devices. The f2fs bdev support discard() function checks for discard support, but this check does not work correctly for conventional zones. As a result, submit discard cmd() may call blkdev issue discard() even when the device does not support discard, leading to a NULL pointer and triggering f2fs bug on(). This problem occurred after a commit changed the behavior of blkdev issue discard() to no longer check for discard support.
Recommendations To fix the issue, avoid the inappropriate blkdev issue discard() call by checking if the device supports discard before calling it. If the device does not support discard, return EOPNOTSUPP. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-02968
CVE-2024-47680
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
USN-7276-1
USN-7277-1
USN-7310-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu