In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) .... If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered. So let's fix it by using a temporary pointer to avoid this issue.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat
  • Enterprise Linux

No data.

Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:5102 2024-08-08T00:00:00Z
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/1ca72a3de915f87232c9a4cb9bebbd3af8ed3e25 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/40a673b4b07efd6f74ff3ab60f38b26aa91ee5d5 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/49669f8e7eb053f91d239df7b1bfb4500255a9d0 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/61380537aa6dd32d8a723d98b8f1bd1b11d8fee0 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/6afc9f4434fa8063aa768c2bf5bf98583aee0877 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/7f9e833fc0f9b47be503af012eb5903086939754 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/8514899c1a4edf802f03c408db901063aa3f05a1 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/d0aa72604fbd80c8aabb46eda00535ed35570f1f cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/f2649d98aa9ca8623149b3cb8df00c944f5655c7 cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024041740-CVE-2024-26878-5748@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26878 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26878 cve-icon
History

Thu, 12 Sep 2024 08:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
cpe:/o:redhat:enterprise_linux:8
Vendors & Products Redhat
Redhat enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-04-17T10:27:35.838Z

Updated: 2024-09-11T17:33:25.716Z

Reserved: 2024-02-19T14:20:24.185Z

Link: CVE-2024-26878

cve-icon Vulnrichment

Updated: 2024-08-02T00:21:04.234Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-04-17T11:15:09.870

Modified: 2024-06-27T12:15:21.783

Link: CVE-2024-26878

cve-icon Redhat

Severity : Low

Publid Date: 2024-04-17T00:00:00Z

Links: CVE-2024-26878 - Bugzilla