In the Linux kernel, the following vulnerability has been resolved:
jfs: fix GPF in diFree
Avoid passing inode with JFS_SBI(inode->i_sb)->ipimap == NULL to diFree()[1]. GFP will appear:
struct inode *ipimap = JFS_SBI(ip->i_sb)->ipimap; struct inomap *imap = JFS_IP(ipimap)->i_imap;
JFS_IP() will return invalid pointer when ipimap == NULL
Call Trace: diFree+0x13d/0x2dc0 fs/jfs/jfs_imap.c:853 [1] jfs_evict_inode+0x2c9/0x370 fs/jfs/inode.c:154 evict+0x2ed/0x750 fs/inode.c:578 iput_final fs/inode.c:1654 [inline] iput.part.0+0x3fe/0x820 fs/inode.c:1680 iput+0x58/0x70 fs/inode.c:1670
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.241-184.433 | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-64kb | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-lts-xenialUpgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-gcp-fipsUpgrade linux-hwe | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub