In the Linux kernel, the following vulnerability has been resolved:
quota: Fix potential NULL pointer dereference
Below race may cause NULL pointer dereference
P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....
If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.
So let's fix it by using a temporary pointer to avoid this issue.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-core | Aug 12, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-develUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-debuginfoUpgrade kernel-headers | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.84-99.169Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-core | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-devel | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotg | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub