CVE-2024-26590

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
22/02/2024
Last modified:
22/04/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> erofs: fix inconsistent per-file compression format<br /> <br /> EROFS can select compression algorithms on a per-file basis, and each<br /> per-file compression algorithm needs to be marked in the on-disk<br /> superblock for initialization.<br /> <br /> However, syzkaller can generate inconsistent crafted images that use<br /> an unsupported algorithmtype for specific inodes, e.g. use MicroLZMA<br /> algorithmtype even it&amp;#39;s not set in `sbi-&gt;available_compr_algs`. This<br /> can lead to an unexpected "BUG: kernel NULL pointer dereference" if<br /> the corresponding decompressor isn&amp;#39;t built-in.<br /> <br /> Fix this by checking against `sbi-&gt;available_compr_algs` for each<br /> m_algorithmformat request. Incorrect !erofs_sb_has_compr_cfgs preset<br /> bitmap is now fixed together since it was harmless previously.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16.0 (including) 6.6.14 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7.0 (including) 6.7.2 (excluding)