NVD Vulnerability Detail

CVE-2024-49877

Summary	In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate When doing cleanup, if flags without OCFS2_BH_READAHEAD, it may trigger NULL pointer dereference in the following ocfs2_set_buffer_uptodate() if bh is NULL.
Publication Date	Oct. 22, 2024, 3:15 a.m.
Registration Date	Oct. 22, 2024, 12:04 p.m.
Last Update	Nov. 9, 2024, 1:15 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/61b84013e560382cbe7dd56758be3154d43a3988	Patch
2	https://git.kernel.org/stable/c/df944dc46d06af65a75191183d52be017e6b9dbe	Patch
3	https://git.kernel.org/stable/c/01cb2e751cc61ade454c9bc1aaa2eac1f8197112	Patch
4	https://git.kernel.org/stable/c/d52c5652e7dcb7a0648bbb8642cc3e617070ab49	Patch
5	https://git.kernel.org/stable/c/46b1edf0536a5291a8ad2337f88c926214b209d9	Patch
6	https://git.kernel.org/stable/c/4846e72ab5a0726e49ad4188b9d9df091ae78c64	Patch
7	https://git.kernel.org/stable/c/33b525cef4cff49e216e4133cc48452e11c0391e	Patch
8	https://git.kernel.org/stable/c/190d98bcd61117a78fe185222d162180f061a6ca
9	https://git.kernel.org/stable/c/e68c8323355e8cedfbe0bec7d5a39009f61640b6

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-476	NULL ポインタデリファレンス	https://cwe.mitre.org/data/definitions/476.html

JVN Vulnerability Information

Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性

Title	Linux の Linux Kernel における NULL ポインタデリファレンスに関する脆弱性
Summary	Linux の Linux Kernel には、NULL ポインタデリファレンスに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 9, 2024, midnight
Registration Date	Oct. 25, 2024, 4:12 p.m.
Last Update	Aug. 20, 2025, 4:09 p.m.

Affected System

Linux

Linux Kernel 4.14.157

Linux Kernel 4.19.87

Linux Kernel 4.20 以上 5.10.227 未満

Linux Kernel 4.4.204

Linux Kernel 4.9.204

Linux Kernel 5.11 以上 5.15.168 未満

Linux Kernel 5.16 以上 6.1.113 未満

Linux Kernel 6.11 以上 6.11.3 未満

Linux Kernel 6.2 以上 6.6.55 未満

Linux Kernel 6.7 以上 6.10.14 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-49877	https://www.cve.org/CVERecord?id=CVE-2024-49877
National Vulnerability Database (NVD)
2	CVE-2024-49877	https://nvd.nist.gov/vuln/detail/CVE-2024-49877

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-476	http://cwe.mitre.org/data/definitions/476.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (01cb2e7)	https://git.kernel.org/stable/c/01cb2e751cc61ade454c9bc1aaa2eac1f8197112
2	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (33b525c)	https://git.kernel.org/stable/c/33b525cef4cff49e216e4133cc48452e11c0391e
3	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (46b1edf)	https://git.kernel.org/stable/c/46b1edf0536a5291a8ad2337f88c926214b209d9
4	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (4846e72)	https://git.kernel.org/stable/c/4846e72ab5a0726e49ad4188b9d9df091ae78c64
5	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (61b8401)	https://git.kernel.org/stable/c/61b84013e560382cbe7dd56758be3154d43a3988
6	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (d52c565)	https://git.kernel.org/stable/c/d52c5652e7dcb7a0648bbb8642cc3e617070ab49
7	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (df944dc)	https://git.kernel.org/stable/c/df944dc46d06af65a75191183d52be017e6b9dbe
Linux Kernel
8	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年10月25日] 掲載	Oct. 25, 2024, 10:48 a.m.
2	[2025年08月20日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 20, 2025, 4:08 p.m.