vulnerability
Amazon Linux AMI 2: CVE-2024-48881: Security patch for kernel (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:S/C:N/I:N/A:C) | Jan 11, 2025 | Mar 14, 2025 | May 20, 2026 |
Description
In the Linux kernel, the following vulnerability has been resolved:
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in
node allocations") leads a NULL pointer deference in cache_set_flush().
1721 if (!IS_ERR_OR_NULL(c->root))
1722 list_add(&c->root->list, &c->btree_cache);
>From the above code in cache_set_flush(), if previous registration code
fails before allocating c->root, it is possible c->root is NULL as what
it is initialized. __bch_btree_node_alloc() never returns NULL but
c->root is possible to be NULL at above line 1721.
This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.
Solutions
References
- AMAZON-AL2/ALAS2KERNEL-5.10-2025-079
- AMAZON-AL2/ALAS2KERNEL-5.15-2025-061
- AMAZON-AL2/ALAS2KERNEL-5.4-2025-091
- AMAZON-AL2/ALASKERNEL-5.10-2025-079
- AMAZON-AL2/ALASKERNEL-5.15-2025-061
- AMAZON-AL2/ALASKERNEL-5.4-2025-091
- CVE-2024-48881
- https://attackerkb.com/topics/CVE-2024-48881
- CWE-476
- EUVD-EUVD-2024-43251
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-43251
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.