CVE-2024-53221— Linux kernel 安全漏洞
Affected Version Matrix 14
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | f543805fcd60f3f9a491cfa2f2dc9284d2569c28< 4289be8465924748daa9bf14866eb7f0987d4e39 | affected |
f543805fcd60f3f9a491cfa2f2dc9284d2569c28< bd9197b72d772be7bccc3b66c83a3157cfe2f96f | affected | ||
f543805fcd60f3f9a491cfa2f2dc9284d2569c28< 8dddc12d03248755d9f709bc1eb9e3ea2bf1b322 | affected | ||
f543805fcd60f3f9a491cfa2f2dc9284d2569c28< 32f5e291b7677495f98246eec573767430321c08 | affected | ||
f543805fcd60f3f9a491cfa2f2dc9284d2569c28< 9e11b1d5fda972f6be60ab732976a7c8e064cd56 | affected | ||
f543805fcd60f3f9a491cfa2f2dc9284d2569c28< b7d0a97b28083084ebdd8e5c6bccd12e6ec18faa | affected | ||
5.6 | affected | ||
< 5.6 | unaffected | ||
| … +6 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-53221の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fs_submit_page_bio() There's issue as follows when concurrently installing the f2fs.ko module and mounting the f2fs file system: KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] RIP: 0010:__bio_alloc+0x2fb/0x6c0 [f2fs] Call Trace: <TASK> f2fs_submit_page_bio+0x126/0x8b0 [f2fs] __get_meta_page+0x1d4/0x920 [f2fs] get_checkpoint_version.constprop.0+0x2b/0x3c0 [f2fs] validate_checkpoint+0xac/0x290 [f2fs] f2fs_get_valid_checkpoint+0x207/0x950 [f2fs] f2fs_fill_super+0x1007/0x39b0 [f2fs] mount_bdev+0x183/0x250 legacy_get_tree+0xf4/0x1e0 vfs_get_tree+0x88/0x340 do_new_mount+0x283/0x5e0 path_mount+0x2b2/0x15b0 __x64_sys_mount+0x1fe/0x270 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e Above issue happens as the biset of the f2fs file system is not initialized before register "f2fs_fs_type". To address above issue just register "f2fs_fs_type" at the last in init_f2fs_fs(). Ensure that all f2fs file system resources are initialized.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于RDMA/rxe模块中请求处理不当，导致内存泄漏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2024-53221の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-53221のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-53221 补丁与修复 (6)
Same Patch Batch · Linux · 2024-12-27 · 221 CVEs total
| CVE-2024-56607 | wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask() | |
| CVE-2024-56594 | drm/amdgpu: set the right AMDGPU sg segment limitation | |
| CVE-2024-56595 | jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree | |
| CVE-2024-56596 | jfs: fix array-index-out-of-bounds in jfs_readdir | |
| CVE-2024-56597 | jfs: fix shift-out-of-bounds in dbSplit | |
| CVE-2024-56598 | jfs: array-index-out-of-bounds fix in dtReadFirst | |
| CVE-2024-56599 | wifi: ath10k: avoid NULL pointer error during sdio remove | |
| CVE-2024-56601 | net: inet: do not leave a dangling sk pointer in inet_create() | |
| CVE-2024-56600 | net: inet6: do not leave a dangling sk pointer in inet6_create() | |
| CVE-2024-56602 | net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() | |
| CVE-2024-56603 | net: af_can: do not leave a dangling sk pointer in can_create() | |
| CVE-2024-56604 | Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() | |
| CVE-2024-56605 | Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() | |
| CVE-2024-56606 | af_packet: avoid erroring out after sock_init_data() in packet_create() | |
| CVE-2024-56618 | pmdomain: imx: gpcv2: Adjust delay after power up handshake | |
| CVE-2024-56615 | bpf: fix OOB devmap writes when deleting elements | |
| CVE-2024-56616 | drm/dp_mst: Fix MST sideband message body length check | |
| CVE-2024-56617 | cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU | |
| CVE-2024-56614 | xsk: fix OOB map writes when deleting elements | |
| CVE-2024-56619 | nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() |
Showing 20 of 221 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-52910
bpf: Free reuseport cBPF prog after RCU grace period. - CVE-2026-52909
ip6_vti: set netns_immutable on the fallback device. - CVE-2026-52908
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corru - CVE-2026-52907
media: rockchip: rkcif: fix off by one bugs
同じベンダー: Linux
- CVE-2026-52910
bpf: Free reuseport cBPF prog after RCU grace period. - CVE-2026-52909
ip6_vti: set netns_immutable on the fallback device. - CVE-2026-52908
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corru - CVE-2026-52907
media: rockchip: rkcif: fix off by one bugs
V. CVE-2024-53221へのコメント
まだコメントはありません