CVE-2024-42079
gfs2: Fix NULL pointer dereference in gfs2_log_flush
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
29 jul 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix NULL pointer dereference in gfs2_log_flush
In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush
lock to provide exclusion against gfs2_log_flush().
In gfs2_log_flush(), check if sdp->sd_jdesc is non-NULL before
dereferencing it. Otherwise, we could run into a NULL pointer
dereference when outstanding glock work races with an unmount
(glock_work_func -> run_queue -> do_xmote -> inode_go_sync ->
gfs2_log_flush).
Productos afectados
Linux · Linux¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://git.kernel.org/stable/c/3429ef5f50909cee9e498c50f0c499b9397116cehttps://git.kernel.org/stable/c/35264909e9d1973ab9aaa2a1b07cda70f12bb828https://git.kernel.org/stable/c/5f6a84cfb33b34610623857bd93919dcb661e29bhttps://git.kernel.org/stable/c/c3c5cfa3170c0940bc66a142859caac07d19b9d6https://git.kernel.org/stable/c/f54f9d5368a4e92ede7dd078a62788dae3a7c6ef