In the Linux kernel, the following vulnerability has been resolved:
scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs
If init debugfs failed during device registration due to memory allocation failure, debugfs_remove_recursive() is called, after which debugfs_dir is not set to NULL. debugfs_remove_recursive() will be called again during device removal. As a result, illegal pointer is accessed.
[ 1665.467244] hisi_sas_v3_hw 0000:b4:02.0: failed to init debugfs! ... [ 1669.836708] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 1669.872669] pc : down_write+0x24/0x70 [ 1669.876315] lr : down_write+0x1c/0x70 [ 1669.879961] sp : ffff000036f53a30 [ 1669.883260] x29: ffff000036f53a30 x28: ffffa027c31549f8 [ 1669.888547] x27: ffffa027c3140000 x26: 0000000000000000 [ 1669.893834] x25: ffffa027bf37c270 x24: ffffa027bf37c270 [ 1669.899122] x23: ffff0000095406b8 x22: ffff0000095406a8 [ 1669.904408] x21: 0000000000000000 x20: ffffa027bf37c310 [ 1669.909695] x19: 00000000000000a0 x18: ffff8027dcd86f10 [ 1669.914982] x17: 0000000000000000 x16: 0000000000000000 [ 1669.920268] x15: 0000000000000000 x14: ffffa0274014f870 [ 1669.925555] x13: 0000000000000040 x12: 0000000000000228 [ 1669.930842] x11: 0000000000000020 x10: 0000000000000bb0 [ 1669.936129] x9 : ffff000036f537f0 x8 : ffff80273088ca10 [ 1669.941416] x7 : 000000000000001d x6 : 00000000ffffffff [ 1669.946702] x5 : ffff000008a36310 x4 : ffff80273088be00 [ 1669.951989] x3 : ffff000009513e90 x2 : 0000000000000000 [ 1669.957276] x1 : 00000000000000a0 x0 : ffffffff00000001 [ 1669.962563] Call trace: [ 1669.965000] down_write+0x24/0x70 [ 1669.968301] debugfs_remove_recursive+0x5c/0x1b0 [ 1669.972905] hisi_sas_debugfs_exit+0x24/0x30 [hisi_sas_main] [ 1669.978541] hisi_sas_v3_remove+0x130/0x150 [hisi_sas_v3_hw] [ 1669.984175] pci_device_remove+0x48/0xd8 [ 1669.988082] device_release_driver_internal+0x1b4/0x250 [ 1669.993282] device_release_driver+0x28/0x38 [ 1669.997534] pci_stop_bus_device+0x84/0xb8 [ 1670.001611] pci_stop_and_remove_bus_device_locked+0x24/0x40 [ 1670.007244] remove_store+0xfc/0x140 [ 1670.010802] dev_attr_store+0x44/0x60 [ 1670.014448] sysfs_kf_write+0x58/0x80 [ 1670.018095] kernfs_fop_write+0xe8/0x1f0 [ 1670.022000] __vfs_write+0x60/0x190 [ 1670.025472] vfs_write+0xac/0x1c0 [ 1670.028771] ksys_write+0x6c/0xd8 [ 1670.032071] __arm64_sys_write+0x24/0x30 [ 1670.035977] el0_svc_common+0x78/0x130 [ 1670.039710] el0_svc_handler+0x38/0x78 [ 1670.043442] el0_svc+0x8/0xc
To fix this, set debugfs_dir to NULL after debugfs_remove_recursive().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-azureUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-nvidia-6.5Upgrade linux-awsUpgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-gkeop-5.15Upgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-azure-fdeUpgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatencyUpgrade linux-oracleUpgrade linux-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-ibm-5.15Upgrade linux-gkeUpgrade linux-azure-fde-5.15Upgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-nvidia-tegraUpgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub