CVE-2024-48881

Published Jan 11, 2025

Last updated a month ago

CVSS medium 5.5

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush(). 1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache); >From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721. This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-476

Hype score: Not currently trending

CVE-2024-48881 In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove u… https://t.co/5lxI2MlQp1
@CVEnew
11 Jan 2025
341 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "562E7628-8B2C-4374-AD43-F402A8609611",
            "versionEndExcluding": "4.20",
            "versionStartIncluding": "4.19.291"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83AA4770-AF17-46A7-A43C-5B45757A7299",
            "versionEndExcluding": "5.4.287",
            "versionStartIncluding": "5.4.251"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6692BFB-2276-4A4B-A8EE-0162FF831E91",
            "versionEndExcluding": "5.10.231",
            "versionStartIncluding": "5.10.188"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91EF4E8C-8E07-49AC-B2B1-1C4D11DA11FE",
            "versionEndExcluding": "5.15.174",
            "versionStartIncluding": "5.15.121"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0B5D3825-64F7-4C30-BE1D-7CA92485F8A8",
            "versionEndExcluding": "6.1.120",
            "versionStartIncluding": "6.1.39"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0387259A-7982-4C8B-BB1D-5873FAB1DF5B",
            "versionEndExcluding": "6.6.66",
            "versionStartIncluding": "6.4.4"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9501D045-7A94-42CA-8B03-821BE94A65B7",
            "versionEndExcluding": "6.12.5",
            "versionStartIncluding": "6.7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References