In the Linux kernel, the following vulnerability has been resolved:
maple_tree: fix mas_empty_area_rev() null pointer dereference
Currently the code calls mas_start() followed by mas_data_end() if the maple state is MA_START, but mas_start() may return with the maple state node == NULL. This will lead to a null pointer dereference when checking information in the NULL node, which is done in mas_data_end().
Avoid setting the offset if there is no node by waiting until after the maple state is checked for an empty or single entry state.
A user could trigger the events to cause a kernel oops by unmapping all vmas to produce an empty maple tree, then mapping a vma that would cause the scenario described above.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpfUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-debugUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-64kb-develUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-marvell | Jun 24, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub