CVE-2024-57875

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
11/01/2025
Last modified:
17/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> block: RCU protect disk-&gt;conv_zones_bitmap<br /> <br /> Ensure that a disk revalidation changing the conventional zones bitmap<br /> of a disk does not cause invalid memory references when using the<br /> disk_zone_is_conv() helper by RCU protecting the disk-&gt;conv_zones_bitmap<br /> pointer.<br /> <br /> disk_zone_is_conv() is modified to operate under the RCU read lock and<br /> the function disk_set_conv_zones_bitmap() is added to update a disk<br /> conv_zones_bitmap pointer using rcu_replace_pointer() with the disk<br /> zone_wplugs_lock spinlock held.<br /> <br /> disk_free_zone_resources() is modified to call<br /> disk_update_zone_resources() with a NULL bitmap pointer to free the disk<br /> conv_zones_bitmap. disk_set_conv_zones_bitmap() is also used in<br /> disk_update_zone_resources() to set the new (revalidated) bitmap and<br /> free the old one.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.12.5 (excluding)