PT-2024-33798 · Linux+7 · Linux Kernel+7
Julian Sun
+1
·
Published
2024-09-02
·
Updated
2025-05-28
·
CVE-2024-49957
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.58
Description:
A null-pointer dereference error occurs in the Linux kernel when the journal load fails during the mounting process. This happens because
jbd2 journal load() fails with a NULL j sb buffer when journal reset() fails due to a too short journal. As a result, ocfs2 journal shutdown() calls a series of functions, ultimately leading to a null-pointer dereference error in lock buffer(journal->j sb buffer). To resolve this issue, it is recommended to check the JBD2 LOADED flag to ensure the journal was properly loaded and use the journal instead of osb->journal directly to simplify the code.Recommendations:
To resolve this issue, update to Linux kernel version 6.6.58 or later. As a temporary workaround, consider adding a check for the
JBD2 LOADED flag before calling lock buffer(journal->j sb buffer) to prevent the null-pointer dereference error. Additionally, modify the code to use the journal instead of osb->journal directly to simplify the code and prevent similar issues.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu