CVE-2024-58058

Summary

In the Linux kernel, the following vulnerability has been resolved:

ubifs: skip dumping tnc tree when zroot is null

Clearing slab cache will free all znode in memory and make c->zroot.znode = NULL, then dumping tnc tree will access c->zroot.znode which cause null pointer dereference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < 428aff8f7cfb0d9a8854477648022cef96bcab28affected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < 6211c11fc20424bbc6d79c835c7c212b553ae898affected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < 1787cd67bb94b106555ffe64f887f6aa24b47010affected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < e01b55f261ccc96e347eba4931e4429d080d879daffected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < 40e25a3c0063935763717877bb2a814c081509ffaffected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < 77e5266e3d3faa6bdcf20d9c68a8972f6aa06522affected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < 2a987950df825d0144370e700dc5fb337684ffbaaffected
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d < bdb0ca39e0acccf6771db49c3f94ed787d05f2d7affected
LinuxLinux2.6.27affected
LinuxLinux0 < 2.6.27unaffected
LinuxLinux5.4.291 <= 5.4.*unaffected
LinuxLinux5.10.235 <= 5.10.*unaffected
LinuxLinux5.15.179 <= 5.15.*unaffected
LinuxLinux6.1.129 <= 6.1.*unaffected
LinuxLinux6.6.76 <= 6.6.*unaffected
LinuxLinux6.12.13 <= 6.12.*unaffected
LinuxLinux6.13.2 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

Additional References

References