In the Linux kernel, the following vulnerability has been resolved:
udf: Fix NULL pointer dereference in udf_symlink function
In function udf_symlink, epos.bh is assigned with the value returned by udf_tgetblk. The function udf_tgetblk is defined in udf/misc.c and returns the value of sb_getblk function that could be NULL. Then, epos.bh is used without any check, causing a possible NULL pointer dereference when sb_getblk fails.
This fix adds a check to validate the value of epos.bh.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-headersUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-core | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.241-184.433Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-develUpgrade perfUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-obs-build | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1182-awsUpgrade linux-image-4.4.0-1145-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-269-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-1144-awsUpgrade linux-image-4.4.0-1114-fipsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-269-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenial | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub