CVE-2024-26632

MEDIUM

Linux Kernel 5.17-6.1.74, 6.2.0-6.6.13, 6.7.0-6.7.1 - Use-After-Free in bio_for_each_folio_all

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: block: Fix iterating over an empty bio with bio_for_each_folio_all If the bio contains no data, bio_first_folio() calls page_folio() on a NULL pointer and oopses. Move the test that we've reached the end of the bio from bio_next_folio() to bio_first_folio(). [axboe: add unlikely() to error case]

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0023
EPSS Percentile 13.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (14)
linux/Kernel 5.17.0 - 6.1.75linux
linux/Kernel 6.2.0 - 6.6.14linux
linux/Kernel 6.7.0 - 6.7.2linux
Linux/Linux < 5.17
Linux/Linux 5.17
Linux/Linux 6.1.75 - 6.1.*
Linux/Linux 6.6.14 - 6.6.*
Linux/Linux 6.7.2 - 6.7.*
Linux/Linux 6.8
Linux/Linux 640d1930bef4f87ec8d8d2b05f0f6edc1dfcf662 - 7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7
... and 4 more
Published Mar 18, 2024
Tracked Since Feb 18, 2026