CVE-2024-48881

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
11/01/2025
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again<br /> <br /> Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in<br /> node allocations") leads a NULL pointer deference in cache_set_flush().<br /> <br /> 1721 if (!IS_ERR_OR_NULL(c-&gt;root))<br /> 1722 list_add(&amp;c-&gt;root-&gt;list, &amp;c-&gt;btree_cache);<br /> <br /> &gt;From the above code in cache_set_flush(), if previous registration code<br /> fails before allocating c-&gt;root, it is possible c-&gt;root is NULL as what<br /> it is initialized. __bch_btree_node_alloc() never returns NULL but<br /> c-&gt;root is possible to be NULL at above line 1721.<br /> <br /> This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.19.291 (including) 4.20 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.4.251 (including) 5.4.287 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.10.188 (including) 5.10.231 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.121 (including) 5.15.174 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1.39 (including) 6.1.120 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.4.4 (including) 6.6.66 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.5 (excluding)
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*