In the Linux kernel, the following vulnerability has been resolved:
jfs: fix GPF in diFree
Avoid passing inode with JFS_SBI(inode->i_sb)->ipimap == NULL to diFree()[1]. GFP will appear:
struct inode *ipimap = JFS_SBI(ip->i_sb)->ipimap; struct inomap *imap = JFS_IP(ipimap)->i_imap;
JFS_IP() will return invalid pointer when ipimap == NULL
Call Trace: diFree+0x13d/0x2dc0 fs/jfs/jfs_imap.c:853 [1] jfs_evict_inode+0x2c9/0x370 fs/jfs/inode.c:154 evict+0x2ed/0x750 fs/inode.c:578 iput_final fs/inode.c:1654 [inline] iput.part.0+0x3fe/0x820 fs/inode.c:1680 iput+0x58/0x70 fs/inode.c:1670
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.59-52.142Upgrade python-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.241-184.433 | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-default-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-fipsUpgrade linux-hweUpgrade linux-azureUpgrade linux-azure-fde-5.15Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-bluefieldUpgrade linuxUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-lts-xenialUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-azure-4.15 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub