Not rated
CVE-2024-42079 In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush…
Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush lock to provide exclusion against gfs2_log_flush(). In gfs2_log_flush(), check if sdp->sd_jdesc is non-NULL before dereferencing it. Otherwise, we could run into a NULL pointer dereference when outstanding glock work races with an unmount (glock_work_func -> run_queue -> do_xmote -> inode_go_sync -> gfs2_log_flush).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.10 | earliest → < 6.10 | 6.10 |
| Linux 6.9 | earliest → < 6.9.8 | 6.9.8 |
| Linux 6.6 | earliest → < 6.6.37 | 6.6.37 |
| Linux 6.1 | earliest → < 6.1.162 | 6.1.162 |
| Linux 5.15 | earliest → < 5.15.200 | 5.15.200 |
| Linux | 5.12 | No fix stated |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.7 → latest | No fix stated |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.7 → latest | No fix stated |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.7 → latest | No fix stated |
Other CVEs of Linux
The 18298 CVEs of Linux →
CVE-2026-99280
ksmbd: drain session procfs readers before dropping table references
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated
CVE-2026-99279
ksmbd: reclaim ended sessions on logoff and expiration
Not rated