PT-2024-32747 · Linux+7 · Linux Kernel+7
Syzbot
·
Published
2024-09-04
·
Updated
2025-05-28
·
CVE-2024-47699
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
A potential null pointer dereference issue has been resolved in the Linux kernel. The issue occurs in the nilfs2 filesystem when a b-tree is broken on the device and the b-tree height is greater than 2, even if the number of child nodes of the b-tree root is 0. This can lead to a NULL pointer dereference in
nilfs btree prepare insert(), which is called from nilfs btree insert(). The issue is caused by nilfs btree do lookup() not setting the block buffer head in any of path[x].bp bh when the number of child nodes of the b-tree root is 0. The problem is fixed by adding a check to nilfs btree root broken() to detect this inconsistency.Recommendations
To resolve the issue, update to Linux kernel version 6.6.58 or later.
As a temporary workaround, consider disabling the
nilfs btree insert() function until a patch is available.
Restrict access to the nilfs2 filesystem to minimize the risk of exploitation.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu