CVE-2024-48881— bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 24
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 0729029e647234fa1a94376b6edffec5c2cd75f6< 4379c5828492a4c2a651c8f826a01453bd2b80b0 | affected |
db9439cef0b5efccf8021fe89f4953e0f901e85b< 336e30f32ae7c043fde0f6fa21586ff30bea9fe2 | affected | ||
991e9c186a8ac6ab272a86e0ddc6f9733c38b867< fb5fee35bdd18316a84b5f30881a24e1415e1464 | affected | ||
68118c339c6e1e16ae017bef160dbe28a27ae9c8< 5202391970ffbf81975251b3526b890ba027b715 | affected | ||
028ddcac477b691dd9205c92f991cc15259d033e< cc05aa2c0117e20fa25a3c0d915f98b8f2e78667 | affected | ||
028ddcac477b691dd9205c92f991cc15259d033e< 5e0e913624bcd24f3de414475018d3023f060ee1 | affected | ||
028ddcac477b691dd9205c92f991cc15259d033e< b2e382ae12a63560fca35050498e19e760adf8c0 | affected | ||
fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8 | affected | ||
| … +16 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-48881
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush(). 1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache); >From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721. This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于BCache模块在cache_set_flush中，未正确检查c->root是否为NULL，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-48881
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-48881
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-48881 (7)
Same Patch Batch · Linux · 2025-01-11 · 67 CVEs total
| CVE-2024-57793 | virt: tdx-guest: Just leak decrypted memory on unrecoverable errors | |
| CVE-2024-57878 | arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR | |
| CVE-2024-57877 | arm64: ptrace: fix partial SETREGSET for NT_ARM_POE | |
| CVE-2024-57876 | drm/dp_mst: Fix resetting msg rx state after topology removal | |
| CVE-2024-57806 | btrfs: fix transaction atomicity bug when enabling simple quotas | |
| CVE-2024-57805 | ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP | |
| CVE-2024-57804 | scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs | |
| CVE-2024-57800 | ALSA: memalloc: prefer dma_mapping_error() over explicit address checking | |
| CVE-2024-57799 | phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM | |
| CVE-2024-57798 | drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() | |
| CVE-2024-57807 | scsi: megaraid_sas: Fix for a potential deadlock | |
| CVE-2024-57792 | power: supply: gpio-charger: Fix set charge current limits | |
| CVE-2024-57791 | net/smc: check return value of sock_recvmsg when draining clc data | |
| CVE-2024-56788 | net: ethernet: oa_tc6: fix tx skb race condition between reference pointers | |
| CVE-2024-56372 | net: tun: fix tun_napi_alloc_frags() | |
| CVE-2024-56369 | drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() | |
| CVE-2024-56368 | ring-buffer: Fix overflow in __rb_map_vma | |
| CVE-2024-55916 | Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet | |
| CVE-2024-55881 | KVM: x86: Play nice with protected guests in complete_hypercall_exit() | |
| CVE-2024-54193 | accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal() |
Showing top 20 of 67 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-64255
wifi: iwlwifi: mld: validate sta_mask before ffs() in BA ses - CVE-2026-64254
NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and - CVE-2026-64253
kernel/fork: clear PF_BLOCK_TS in copy_process() - CVE-2026-64252
MIPS: DEC: Prevent initial console buffer from landing in XK - CVE-2026-64251
pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next(
Same vendor: Linux
- CVE-2026-64255
wifi: iwlwifi: mld: validate sta_mask before ffs() in BA ses - CVE-2026-64254
NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and - CVE-2026-64253
kernel/fork: clear PF_BLOCK_TS in copy_process() - CVE-2026-64252
MIPS: DEC: Prevent initial console buffer from landing in XK - CVE-2026-64251
pwrseq: core: fix use-after-free in pwrseq_debugfs_seq_next(
V. Comments for CVE-2024-48881
No comments yet