In the Linux kernel, the following vulnerability has been resolved:
quota: Fix potential NULL pointer dereference
Below race may cause NULL pointer dereference
P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....
If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.
So let's fix it by using a temporary pointer to avoid this issue.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernel-debug-core | Aug 12, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-livepatch-4.14.343-259.562Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.84-99.169Upgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headers | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 9, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64 | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade kernel-rtUpgrade kernel-azureUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-debugUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-azure-extra | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-113-generic-64k | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub