CVE-2024-42320
s390/dasd: fix error checks in dasd_copy_pair_store()
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Aug 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
s390/dasd: fix error checks in dasd_copy_pair_store()
dasd_add_busid() can return an error via ERR_PTR() if an allocation
fails. However, two callsites in dasd_copy_pair_store() do not check
the result, potentially resulting in a NULL pointer dereference. Fix
this by checking the result with IS_ERR() and returning the error up
the stack.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/68d4c3722290ad300c295fb3435e835d200d5cb2https://git.kernel.org/stable/c/8e64d2356cbc800b4cd0e3e614797f76bcf0cdb8https://git.kernel.org/stable/c/cc8b7284d5076722e0b8062373b68d8e47c3bacehttps://git.kernel.org/stable/c/e511167e65d332d07b3c7a3d5a741ee9c19a8c27https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html