Description
In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush(). 1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache); >From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721. This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
0729029e647234fa1a94376b6edffec5c2cd75f6 to < 4379c5828492a4c2a651c8f826a01453bd2b80b0affecteddb9439cef0b5efccf8021fe89f4953e0f901e85b to < 336e30f32ae7c043fde0f6fa21586ff30bea9fe2affected991e9c186a8ac6ab272a86e0ddc6f9733c38b867 to < fb5fee35bdd18316a84b5f30881a24e1415e1464affected68118c339c6e1e16ae017bef160dbe28a27ae9c8 to < 5202391970ffbf81975251b3526b890ba027b715affected028ddcac477b691dd9205c92f991cc15259d033e to < cc05aa2c0117e20fa25a3c0d915f98b8f2e78667affected028ddcac477b691dd9205c92f991cc15259d033e to < 5e0e913624bcd24f3de414475018d3023f060ee1affected028ddcac477b691dd9205c92f991cc15259d033e to < b2e382ae12a63560fca35050498e19e760adf8c0affectedfe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8affected0cabf9e164660e8d66c4810396046383a1110a69affected5.4.251 to < 5.4.287affected5.10.188 to < 5.10.231affected5.15.121 to < 5.15.174affected6.1.39 to < 6.1.120affected4.19.291 to < 4.20affected6.4.4 to < 6.5affected
Linux Linux
Default version status: affected
6.5affected0 to < 6.5unaffected5.4.287 to ≤ 5.4.*unaffected5.10.231 to ≤ 5.10.*unaffected5.15.174 to ≤ 5.15.*unaffected6.1.120 to ≤ 6.1.*unaffected6.6.66 to ≤ 6.6.*unaffected6.12.5 to ≤ 6.12.*unaffected6.13 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4379c5828492a4c2a651c8f826a01453bd2b80b0 ↗
- https://git.kernel.org/stable/c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2 ↗
- https://git.kernel.org/stable/c/fb5fee35bdd18316a84b5f30881a24e1415e1464 ↗
- https://git.kernel.org/stable/c/5202391970ffbf81975251b3526b890ba027b715 ↗
- https://git.kernel.org/stable/c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667 ↗
- https://git.kernel.org/stable/c/5e0e913624bcd24f3de414475018d3023f060ee1 ↗
- https://git.kernel.org/stable/c/b2e382ae12a63560fca35050498e19e760adf8c0 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗