In the Linux kernel, the following vulnerability has been resolved:
udf: Fix NULL pointer dereference in udf_symlink function
In function udf_symlink, epos.bh is assigned with the value returned by udf_tgetblk. The function udf_tgetblk is defined in udf/misc.c and returns the value of sb_getblk function that could be NULL. Then, epos.bh is used without any check, causing a possible NULL pointer dereference when sb_getblk fails.
This fix adds a check to validate the value of epos.bh.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade python3-perf | Jul 3, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.241-184.433Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.59-52.142Upgrade kernel-toolsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf | May 21, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-core | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-obs-build | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1144-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-269-genericUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1114-fipsUpgrade linux-image-kvmUpgrade linux-image-fipsUpgrade linux-image-4.4.0-1145-kvmUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1182-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-269-lowlatency | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub