Aller au contenu
Se connecter
Non notée

CVE-2024-26878 In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference…

Description

In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) .... If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered. So let's fix it by using a temporary pointer to avoid this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.9 premières → < 6.9 6.9
Linux 6.8 premières → < 6.8.2 6.8.2
Linux 6.7 premières → < 6.7.11 6.7.11
Linux 6.6 premières → < 6.6.23 6.6.23
Linux 6.1 premières → < 6.1.83 6.1.83
Linux 5.15 premières → < 5.15.153 5.15.153
Linux 5.10 premières → < 5.10.214 5.10.214
Linux 5.4 premières → < 5.4.273 5.4.273
Linux 4.19 premières → < 4.19.311 4.19.311
Afficher les 5 autres branches
Produit Versions touchées Corrigé en
Linux 4.14 Pas de correctif indiqué
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 premières → < 1.1.1 1.1.1
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

Autres CVE de Linux

Les 18286 CVE de Linux →
CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics Non notée CVE-2026-100081 xen-netback: defer xenvif_mcast_addr_list_free() Non notée CVE-2026-100080 xen-netback: Fix UAF when reading statistics data Non notée CVE-2026-99270 tcp: Fix potential UAF in reqsk_timer_handler(). 8.1 Élevée
Suivre cette CVE