{"id":"CVE-2024-48881","state":"PUBLISHED","title":"bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721         if (!IS_ERR_OR_NULL(c->root))\n1722                 list_add(&c->root->list, &c->btree_cache);\n\n>From the above code in cache_set_flush(), if previous registration code\nfails before allocating c->root, it is possible c->root is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc->root is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.","publishedAt":"2025-01-11T12:25:18.614Z","updatedAt":"2026-10-15T00:53:14.555Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0729029e647234fa1a94376b6edffec5c2cd75f6","status":"affected","lessThan":"4379c5828492a4c2a651c8f826a01453bd2b80b0","versionType":"git"},{"version":"db9439cef0b5efccf8021fe89f4953e0f901e85b","status":"affected","lessThan":"336e30f32ae7c043fde0f6fa21586ff30bea9fe2","versionType":"git"},{"version":"991e9c186a8ac6ab272a86e0ddc6f9733c38b867","status":"affected","lessThan":"fb5fee35bdd18316a84b5f30881a24e1415e1464","versionType":"git"},{"version":"68118c339c6e1e16ae017bef160dbe28a27ae9c8","status":"affected","lessThan":"5202391970ffbf81975251b3526b890ba027b715","versionType":"git"},{"version":"028ddcac477b691dd9205c92f991cc15259d033e","status":"affected","lessThan":"cc05aa2c0117e20fa25a3c0d915f98b8f2e78667","versionType":"git"},{"version":"028ddcac477b691dd9205c92f991cc15259d033e","status":"affected","lessThan":"5e0e913624bcd24f3de414475018d3023f060ee1","versionType":"git"},{"version":"028ddcac477b691dd9205c92f991cc15259d033e","status":"affected","lessThan":"b2e382ae12a63560fca35050498e19e760adf8c0","versionType":"git"},{"version":"fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8","status":"affected","versionType":"git"},{"version":"0cabf9e164660e8d66c4810396046383a1110a69","status":"affected","versionType":"git"},{"version":"5.4.251","status":"affected","lessThan":"5.4.287","versionType":"semver"},{"version":"5.10.188","status":"affected","lessThan":"5.10.231","versionType":"semver"},{"version":"5.15.121","status":"affected","lessThan":"5.15.174","versionType":"semver"},{"version":"6.1.39","status":"affected","lessThan":"6.1.120","versionType":"semver"},{"version":"4.19.291","status":"affected","lessThan":"4.20","versionType":"semver"},{"version":"6.4.4","status":"affected","lessThan":"6.5","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/md/bcache/super.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.5","versionType":"semver"},{"version":"5.4.287","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.231","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.174","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.120","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.66","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.5","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.13","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/md/bcache/super.c"]}],"references":["https://git.kernel.org/stable/c/4379c5828492a4c2a651c8f826a01453bd2b80b0","https://git.kernel.org/stable/c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2","https://git.kernel.org/stable/c/fb5fee35bdd18316a84b5f30881a24e1415e1464","https://git.kernel.org/stable/c/5202391970ffbf81975251b3526b890ba027b715","https://git.kernel.org/stable/c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667","https://git.kernel.org/stable/c/5e0e913624bcd24f3de414475018d3023f060ee1","https://git.kernel.org/stable/c/b2e382ae12a63560fca35050498e19e760adf8c0","https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html","https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html","https://cert-portal.siemens.com/productcert/html/ssa-398330.html","https://cert-portal.siemens.com/productcert/html/ssa-355557.html"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:07:56.516Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/48xxx/CVE-2024-48881.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-48881","state":"PUBLISHED","datePublished":"2025-01-11T12:25:18.614Z","dateUpdated":"2026-10-15T00:53:14.555Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-01-09T09:50:31.739Z"},"containers":{"cna":{"title":"bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nbcache: revert replacing IS_ERR_OR_NULL with IS_ERR again\n\nCommit 028ddcac477b (\"bcache: Remove unnecessary NULL point check in\nnode allocations\") leads a NULL pointer deference in cache_set_flush().\n\n1721         if (!IS_ERR_OR_NULL(c->root))\n1722                 list_add(&c->root->list, &c->btree_cache);\n\n>From the above code in cache_set_flush(), if previous registration code\nfails before allocating c->root, it is possible c->root is NULL as what\nit is initialized. __bch_btree_node_alloc() never returns NULL but\nc->root is possible to be NULL at above line 1721.\n\nThis patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"0729029e647234fa1a94376b6edffec5c2cd75f6","status":"affected","lessThan":"4379c5828492a4c2a651c8f826a01453bd2b80b0","versionType":"git"},{"version":"db9439cef0b5efccf8021fe89f4953e0f901e85b","status":"affected","lessThan":"336e30f32ae7c043fde0f6fa21586ff30bea9fe2","versionType":"git"},{"version":"991e9c186a8ac6ab272a86e0ddc6f9733c38b867","status":"affected","lessThan":"fb5fee35bdd18316a84b5f30881a24e1415e1464","versionType":"git"},{"version":"68118c339c6e1e16ae017bef160dbe28a27ae9c8","status":"affected","lessThan":"5202391970ffbf81975251b3526b890ba027b715","versionType":"git"},{"version":"028ddcac477b691dd9205c92f991cc15259d033e","status":"affected","lessThan":"cc05aa2c0117e20fa25a3c0d915f98b8f2e78667","versionType":"git"},{"version":"028ddcac477b691dd9205c92f991cc15259d033e","status":"affected","lessThan":"5e0e913624bcd24f3de414475018d3023f060ee1","versionType":"git"},{"version":"028ddcac477b691dd9205c92f991cc15259d033e","status":"affected","lessThan":"b2e382ae12a63560fca35050498e19e760adf8c0","versionType":"git"},{"version":"fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8","status":"affected","versionType":"git"},{"version":"0cabf9e164660e8d66c4810396046383a1110a69","status":"affected","versionType":"git"},{"version":"5.4.251","status":"affected","lessThan":"5.4.287","versionType":"semver"},{"version":"5.10.188","status":"affected","lessThan":"5.10.231","versionType":"semver"},{"version":"5.15.121","status":"affected","lessThan":"5.15.174","versionType":"semver"},{"version":"6.1.39","status":"affected","lessThan":"6.1.120","versionType":"semver"},{"version":"4.19.291","status":"affected","lessThan":"4.20","versionType":"semver"},{"version":"6.4.4","status":"affected","lessThan":"6.5","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/md/bcache/super.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.5","versionType":"semver"},{"version":"5.4.287","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.231","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.174","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.120","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.66","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.5","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.13","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/md/bcache/super.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/4379c5828492a4c2a651c8f826a01453bd2b80b0"},{"url":"https://git.kernel.org/stable/c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2"},{"url":"https://git.kernel.org/stable/c/fb5fee35bdd18316a84b5f30881a24e1415e1464"},{"url":"https://git.kernel.org/stable/c/5202391970ffbf81975251b3526b890ba027b715"},{"url":"https://git.kernel.org/stable/c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667"},{"url":"https://git.kernel.org/stable/c/5e0e913624bcd24f3de414475018d3023f060ee1"},{"url":"https://git.kernel.org/stable/c/b2e382ae12a63560fca35050498e19e760adf8c0"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T15:53:54.293Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.251","versionEndExcluding":"5.4.287"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.188","versionEndExcluding":"5.10.231"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.121","versionEndExcluding":"5.15.174"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.39","versionEndExcluding":"6.1.120"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.6.66"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.12.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.5","versionEndExcluding":"6.13"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.291"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.4.4"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2024-48881","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2025-10-01T19:55:37.185480Z"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","lang":"en","type":"CWE","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-01T19:57:21.982Z"}},{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T20:40:59.667Z"}},{"affected":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","defaultStatus":"unknown","versions":[{"version":"V3.1.0","status":"affected","lessThan":"V3.1.5","versionType":"custom"}]},{"vendor":"Siemens","product":"RUGGEDCOM RST2428P","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V3.2","versionType":"custom"}]},{"vendor":"Siemens","product":"SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V3.2","versionType":"custom"}]},{"vendor":"Siemens","product":"SCALANCE XCM-/XRM-/XCH-/XRH-300 family","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"V3.2","versionType":"custom"}]}],"references":[{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-355557.html"}],"providerMetadata":{"shortName":"siemens-SADP","orgId":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","dateUpdated":"2026-10-15T00:53:14.555Z"},"x_adpType":"supplier"}]}}}