NetSight
IP …
medium5.5

CVE-2024-41055

In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem:…

Impact

In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.10.219 before 5.10.222
from 5.15.149 before 5.15.163
from 6.1.76 before 6.1.100
from 6.6.15 before 6.6.41
from 6.8 before 6.9.10

Weakness classification

CWE-476

References