CVE - CVE-2024-41077

CVE-ID
CVE-2024-41077	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: null_blk: fix validation of block size Block size should be between 512 and PAGE_SIZE and be a power of 2. The current check does not validate this, so update the check. Without this patch, null_blk would Oops due to a null pointer deref when loaded with bs=1536 [1]. [axboe: remove unnecessary braces and != 0 check]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/08f03186b96e25e3154916a2e70732557c770ea7 URL:https://git.kernel.org/stable/c/08f03186b96e25e3154916a2e70732557c770ea7 MISC:https://git.kernel.org/stable/c/2772ed2fc075eef7df3789906fc9dae01e4e132e URL:https://git.kernel.org/stable/c/2772ed2fc075eef7df3789906fc9dae01e4e132e MISC:https://git.kernel.org/stable/c/9625afe1dd4a158a14bb50f81af9e2dac634c0b1 URL:https://git.kernel.org/stable/c/9625afe1dd4a158a14bb50f81af9e2dac634c0b1 MISC:https://git.kernel.org/stable/c/9b873bdaae64bddade9d8c6df23c8a31948d47d0 URL:https://git.kernel.org/stable/c/9b873bdaae64bddade9d8c6df23c8a31948d47d0 MISC:https://git.kernel.org/stable/c/c462ecd659b5fce731f1d592285832fd6ad54053 URL:https://git.kernel.org/stable/c/c462ecd659b5fce731f1d592285832fd6ad54053 MISC:https://git.kernel.org/stable/c/f92409a9da02f27d05d713bff5f865e386cef9b3 URL:https://git.kernel.org/stable/c/f92409a9da02f27d05d713bff5f865e386cef9b3
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)