CVE-2024-57875
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
11/01/2025
Last modified:
17/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
block: RCU protect disk->conv_zones_bitmap<br />
<br />
Ensure that a disk revalidation changing the conventional zones bitmap<br />
of a disk does not cause invalid memory references when using the<br />
disk_zone_is_conv() helper by RCU protecting the disk->conv_zones_bitmap<br />
pointer.<br />
<br />
disk_zone_is_conv() is modified to operate under the RCU read lock and<br />
the function disk_set_conv_zones_bitmap() is added to update a disk<br />
conv_zones_bitmap pointer using rcu_replace_pointer() with the disk<br />
zone_wplugs_lock spinlock held.<br />
<br />
disk_free_zone_resources() is modified to call<br />
disk_update_zone_resources() with a NULL bitmap pointer to free the disk<br />
conv_zones_bitmap. disk_set_conv_zones_bitmap() is also used in<br />
disk_update_zone_resources() to set the new (revalidated) bitmap and<br />
free the old one.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12.5 (excluding) |
To consult the complete list of CPE names with products and versions, see this page



