CVE-2024-42235

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42235
In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() crst_table_free() used to work with NULL pointers before the conversion to ptdescs. Since crst_table_free() can be called with a NULL pointer (error handling in crst_table_upgrade() add an explicit check. Also add the same check to base_crst_free() for consistency reasons. In real life this should not happen, since order two GFP_KERNEL allocations will not fail, unless FAIL_PAGE_ALLOC is enabled and used.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/794fa52b94637d6b2e8c9474fbe3983af5c9f046 Patch
https://git.kernel.org/stable/c/b5efb63acf7bddaf20eacfcac654c25c446eabe8 Patch
https://git.kernel.org/stable/c/f80bd8bb6f380bc265834c46058d38b34174813e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Aug 2024, 14:55

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/794fa52b94637d6b2e8c9474fbe3983af5c9f046 - () https://git.kernel.org/stable/c/794fa52b94637d6b2e8c9474fbe3983af5c9f046 - Patch
References () https://git.kernel.org/stable/c/b5efb63acf7bddaf20eacfcac654c25c446eabe8 - () https://git.kernel.org/stable/c/b5efb63acf7bddaf20eacfcac654c25c446eabe8 - Patch
References () https://git.kernel.org/stable/c/f80bd8bb6f380bc265834c46058d38b34174813e - () https://git.kernel.org/stable/c/f80bd8bb6f380bc265834c46058d38b34174813e - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: s390/mm: agregue verificación de puntero NULL a crst_table_free() base_crst_free() crst_table_free() solía trabajar con punteros NULL antes de la conversión a ptdescs. Dado que crst_table_free() se puede llamar con un puntero NULL (el manejo de errores en crst_table_upgrade() agrega una verificación explícita. También agregue la misma verificación a base_crst_free() por razones de coherencia. En la vida real, esto no debería suceder, ya que ordenar dos asignaciones GFP_KERNEL no falla, a menos que FAIL_PAGE_ALLOC esté habilitado y utilizado.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

07 Aug 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-07 16:15

Updated : 2024-08-08 14:55

NVD link : CVE-2024-42235

Mitre link : CVE-2024-42235

CVE.ORG link : CVE-2024-42235

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference