Description
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() During unmount, ocfs2_journal_shutdown() frees the journal and sets osb->journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2_evict_inode() -> ocfs2_clear_inode() -> ocfs2_checkpoint_inode() -> ocfs2_ci_fully_checkpointed() dereferences osb->journal, causing a NULL pointer dereference. Fix this by adding a NULL check for osb->journal in ocfs2_checkpoint_inode(). If the journal is NULL, it has already been fully flushed and destroyed during shutdown, so there is nothing to checkpoint.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
da5e7c87827e8caa6a1eeec6d95dcf74ab592a01 to < 24daf13422e8328fd588c34a017bdef1949910e8affectedda5e7c87827e8caa6a1eeec6d95dcf74ab592a01 to < 7da7e4ac21895fe34cceffcfc99497cc2750da99affectedda5e7c87827e8caa6a1eeec6d95dcf74ab592a01 to < eb6a13834c23e291f1170cb1b489ec255edfa5a3affectedda5e7c87827e8caa6a1eeec6d95dcf74ab592a01 to < 499714de42ab4d2e778cbb10186684142a1222ebaffectedda5e7c87827e8caa6a1eeec6d95dcf74ab592a01 to < 63921f790234b221e4b15c56c72888b13250f81daffectedda5e7c87827e8caa6a1eeec6d95dcf74ab592a01 to < a291c77c034b7a81849ce9b71cc9ecda9e587d89affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.40 to ≤ 6.18.*unaffected7.1.5 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/24daf13422e8328fd588c34a017bdef1949910e8 ↗
- https://git.kernel.org/stable/c/7da7e4ac21895fe34cceffcfc99497cc2750da99 ↗
- https://git.kernel.org/stable/c/eb6a13834c23e291f1170cb1b489ec255edfa5a3 ↗
- https://git.kernel.org/stable/c/499714de42ab4d2e778cbb10186684142a1222eb ↗
- https://git.kernel.org/stable/c/63921f790234b221e4b15c56c72888b13250f81d ↗
- https://git.kernel.org/stable/c/a291c77c034b7a81849ce9b71cc9ecda9e587d89 ↗