CVE Database
/

CVE-2024-53131

Back to search

CVE-2024-53131

Published: Dec 4, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer dereference bugs that occur when using nilfs2 and two block-related tracepoints. This patch (of 2): It has been reported that when using "block:block_touch_buffer" tracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens because since the tracepoint was added in touch_buffer(), it references the dev_t member bh->b_bdev->bd_dev regardless of whether the buffer head has a pointer to a block_device structure. In the current implementation, the block_device structure is set after the function returns to the caller. Here, touch_buffer() is used to mark the folio/page that owns the buffer head as accessed, but the common search helper for folio/page used by the caller function was optimized to mark the folio/page as accessed when it was reimplemented a long time ago, eliminating the need to call touch_buffer() here in the first place. So this solves the issue by eliminating the touch_buffer() call itself.

VendorProductVersions

Linux

Linux

affected
5305cb830834549b9203ad4d009ad5483c5e293f - < 085556bf8c70e2629e02e79268dac3016a08b8bf
affected
5305cb830834549b9203ad4d009ad5483c5e293f - < 6438f3f42cda825f6f59b4e45ac3a1da28a6f2c9
affected
5305cb830834549b9203ad4d009ad5483c5e293f - < b017697a517f8779ada4e8ce1c2c75dbf60a2636
affected
5305cb830834549b9203ad4d009ad5483c5e293f - < 19c71cdd77973f99a9adc3190130bc3aa7ae5423
affected
5305cb830834549b9203ad4d009ad5483c5e293f - < 3b2a4fd9bbee77afdd3ed5a05a0c02b6cde8d3b9

+3 more versions

Linux

Linux

affected
3.9
unaffected
0 - < 3.9
unaffected
4.19.325 - <= 4.19.*
unaffected
5.4.287 - <= 5.4.*
unaffected
5.10.231 - <= 5.10.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now