In the Linux kernel, the following vulnerability has been resolved:
quota: Fix potential NULL pointer dereference
Below race may cause NULL pointer dereference
P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....
If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.
So let's fix it by using a temporary pointer to avoid this issue.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-modulesUpgrade python3-perfUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-core | Aug 12, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.153-100.162 | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade python3-perf | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-baseUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kb | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-genericUpgrade linux-image-bluefieldUpgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-intel-iotgUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-113-generic-lpae | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub