In the Linux kernel, the following vulnerability has been resolved:
quota: Fix potential NULL pointer dereference
Below race may cause NULL pointer dereference
P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....
If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.
So let's fix it by using a temporary pointer to avoid this issue.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-zfcpdump-devel | Aug 12, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-modules-extra-common | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-devel | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-vdsoUpgrade kernel-default-manUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-renesasUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade dlm-kmp-azure | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-generic-64k-hwe-20.04 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub