Log in Start free

Vulnerability · Published Jan 11, 2025 · Assigned by Linux

CVE-2024-48881bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 82.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush(). 1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache); >From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721. This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.123-1DEBIAN-CVE-2024-48881
Debian:13linux6.12.5-1DEBIAN-CVE-2024-48881
Debian:14linux6.12.5-1DEBIAN-CVE-2024-48881
Ubuntu:22.04:LTSlinux5.15.0-135.146UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux5.15.0-135.146USN-7387-1
Ubuntu:24.04:LTSlinux6.8.0-58.60USN-7449-1
Ubuntu:24.04:LTSlinux6.8.0-58.60UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-aws5.15.0-1080.87UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-aws5.15.0-1080.87USN-7387-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1027.29USN-7449-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1027.29UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1027.29~22.04.1USN-7451-1
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1027.29~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure5.15.0-1084.93USN-7387-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1084.93UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-azure6.8.0-1027.32USN-7449-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1027.32UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1012.12~24.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1027.32~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1027.32~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1084.93.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1014.15UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gcp5.15.0-1079.88USN-7387-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1079.88UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-gcp6.8.0-1028.30USN-7450-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1028.30UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1011.11~24.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1028.30~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1028.30~22.04.1USN-7452-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1077.83UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gke5.15.0-1077.83USN-7387-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1023.27UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-gke6.8.0-1023.27USN-7450-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1062.70UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1062.70USN-7387-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1010.12UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1010.12USN-7450-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-21.21~24.04.1UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-21.21~24.04.1USN-7379-1
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-58.60~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-58.60~22.04.1USN-7449-2
Ubuntu:22.04:LTSlinux-ibm5.15.0-1072.75UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-ibm5.15.0-1072.75USN-7387-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1024.24UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-ibm6.8.0-1024.24USN-7449-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1024.24~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1075.81USN-7387-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1075.81UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-kvm5.15.0-1076.81USN-7388-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1076.81UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-135.146UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-135.146USN-7387-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-58.60.1USN-7449-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-58.60.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1011.12~24.04.1USN-7381-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-58.60.1~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-58.60.1~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1074.75USN-7387-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1074.75UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1026.29USN-7449-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1026.29UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1026.29~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1026.29~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1026.29.1USN-7449-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1026.29.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1033.33USN-7389-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1033.33UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1021.21USN-7389-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1021.21UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1017.17USN-7382-1
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1017.17UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1026.26UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1026.26USN-7449-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1077.83USN-7387-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1077.83UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-oracle6.8.0-1024.25USN-7449-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1024.25UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1024.25~22.04.1USN-7449-1
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1024.25~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-raspi5.15.0-1074.77UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-raspi5.15.0-1074.77USN-7387-1
Ubuntu:24.04:LTSlinux-raspi6.8.0-1028.32USN-7524-1
Ubuntu:24.04:LTSlinux-raspi6.8.0-1028.32UBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-riscv6.8.0-58.60.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-58.60.1~22.04.1UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-48881
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2024-48881
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1044.48USN-7390-1
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1044.48UBUNTU-CVE-2024-48881

Affected products (as reported)

VendorProductVersions
Linux Linux 0729029e647234fa1a94376b6edffec5c2cd75f6 – before 4379c5828492a4c2a651c8f826a01453bd2b80b0db9439cef0b5efccf8021fe89f4953e0f901e85b – before 336e30f32ae7c043fde0f6fa21586ff30bea9fe2991e9c186a8ac6ab272a86e0ddc6f9733c38b867 – before fb5fee35bdd18316a84b5f30881a24e1415e146468118c339c6e1e16ae017bef160dbe28a27ae9c8 – before 5202391970ffbf81975251b3526b890ba027b715028ddcac477b691dd9205c92f991cc15259d033e – before cc05aa2c0117e20fa25a3c0d915f98b8f2e78667028ddcac477b691dd9205c92f991cc15259d033e – before 5e0e913624bcd24f3de414475018d3023f060ee1028ddcac477b691dd9205c92f991cc15259d033e – before b2e382ae12a63560fca35050498e19e760adf8c0fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8
Linux Linux 6.5

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References