Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-41055

mm: prevent derefencing NULL ptr in pfn_section_valid()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 90ad17575d26874287271127d43ef3c2af876cea to < 0100aeb8a12d51950418e685f879cc80cb8e5982affected
  • b448de2459b6d62a53892487ab18b7d823ff0529 to < bc17f2377818dca643a74499c3f5333500c90503affected
  • 68ed9e33324021e9d6b798e9db00ca3093d2012a to < 941e816185661bf2b44b488565d09444ae316509affected
  • 70064241f2229f7ba7b9599a98f68d9142e81a97 to < 797323d1cf92d09b7a017cfec576d9babf99cde7affected
  • 5ec8e8ea8b7783fab150cf86404fc38cb4db8800 to < adccdf702b4ea913ded5ff512239e382d7473b63affected
  • 5ec8e8ea8b7783fab150cf86404fc38cb4db8800 to < 82f0b6f041fad768c28b4ad05a683065412c226eaffected
  • 3a01daace71b521563c38bbbf874e14c3e58adb7affected
  • 5.10.210 to < 5.10.222affected
  • 5.15.149 to < 5.15.163affected
  • 6.1.76 to < 6.1.100affected
  • 6.6.15 to < 6.6.41affected
  • 6.7.3 to < 6.8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 5.10.222 to ≤ 5.10.*unaffected
  • 5.15.163 to ≤ 5.15.*unaffected
  • 6.1.100 to ≤ 6.1.*unaffected
  • 6.6.41 to ≤ 6.6.*unaffected
  • 6.9.10 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References