CVE-2024-26632

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26632
In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bio_for_each_folio_all If the bio contains no data, bio_first_folio() calls page_folio() on a NULL pointer and oopses. Move the test that we've reached the end of the bio from bio_next_folio() to bio_first_folio(). [axboe: add unlikely() to error case]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7 Patch
https://git.kernel.org/stable/c/a6bd8182137a12d22d3f2cee463271bdcb491659 Patch
https://git.kernel.org/stable/c/c6350b5cb78e9024c49eaee6fdb914ad2903a5fe Patch
https://git.kernel.org/stable/c/ca3ede3f5893e2d26d4dbdef1eec28a8487fafde Patch
https://git.kernel.org/stable/c/7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7 Patch
https://git.kernel.org/stable/c/a6bd8182137a12d22d3f2cee463271bdcb491659 Patch
https://git.kernel.org/stable/c/c6350b5cb78e9024c49eaee6fdb914ad2903a5fe Patch
https://git.kernel.org/stable/c/ca3ede3f5893e2d26d4dbdef1eec28a8487fafde Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Mar 2025, 17:33

Type Values Removed Values Added
CWE CWE-476
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7 - () https://git.kernel.org/stable/c/7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7 - Patch
References () https://git.kernel.org/stable/c/a6bd8182137a12d22d3f2cee463271bdcb491659 - () https://git.kernel.org/stable/c/a6bd8182137a12d22d3f2cee463271bdcb491659 - Patch
References () https://git.kernel.org/stable/c/c6350b5cb78e9024c49eaee6fdb914ad2903a5fe - () https://git.kernel.org/stable/c/c6350b5cb78e9024c49eaee6fdb914ad2903a5fe - Patch
References () https://git.kernel.org/stable/c/ca3ede3f5893e2d26d4dbdef1eec28a8487fafde - () https://git.kernel.org/stable/c/ca3ede3f5893e2d26d4dbdef1eec28a8487fafde - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 09:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7 - () https://git.kernel.org/stable/c/7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7 -
References () https://git.kernel.org/stable/c/a6bd8182137a12d22d3f2cee463271bdcb491659 - () https://git.kernel.org/stable/c/a6bd8182137a12d22d3f2cee463271bdcb491659 -
References () https://git.kernel.org/stable/c/c6350b5cb78e9024c49eaee6fdb914ad2903a5fe - () https://git.kernel.org/stable/c/c6350b5cb78e9024c49eaee6fdb914ad2903a5fe -
References () https://git.kernel.org/stable/c/ca3ede3f5893e2d26d4dbdef1eec28a8487fafde - () https://git.kernel.org/stable/c/ca3ede3f5893e2d26d4dbdef1eec28a8487fafde -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: bloque: corrige la iteración sobre una biografía vacía con bio_for_each_folio_all Si la biografía no contiene datos, bio_first_folio() llama a page_folio() en un puntero NULL y ¡vaya! Mueve la prueba de que hemos llegado al final de la biografía de bio_next_folio() a bio_first_folio(). [axboe: agregue improbable() al caso de error]

18 Mar 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-18 11:15

Updated : 2025-03-03 17:33

NVD link : CVE-2024-26632

Mitre link : CVE-2024-26632

CVE.ORG link : CVE-2024-26632

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference