CVE-2024-40952

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference vulnerability has been resolved in the Linux kernel. The issue occurs in the ocfs2 journal dirty() function due to the removal of bdev->bd super and the change in usage from bdev->bd super to b assoc map->host->i sb, which introduces a NULL pointer dereference since b assoc map is still not initialized. This can be easily reproduced by running xfstests generic/186, which simulates no more credits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.