In the Linux kernel, the following vulnerability has been resolved:
quota: Fix potential NULL pointer dereference
Below race may cause NULL pointer dereference
P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....
If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.
So let's fix it by using a temporary pointer to avoid this issue.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-devel | Aug 12, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.214-202.855Upgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade bpftoolUpgrade kernel-tools | Aug 19, 2024 | Apr 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-modules-extra-commonUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 9, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules | Aug 22, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade ocfs2-kmp-azure | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-bluefieldUpgrade linux-image-oemUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-raspi2 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub