Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Andreas Hindborg

Researcher fromSamsung
#34373of 56,330
7.8Total CVSS
Vulnerabilities · 1
PT-2024-29250
7.8
2024-06-03
Linux · Linux Kernel · CVE-2024-41077
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.43 **Description** The issue is related to the null blk module in the Linux kernel, where the block size validation is incorrect. The block size should be between 512 and PAGE SIZE and be a power of 2. Without the patch, null blk would result in a null pointer dereference when loaded with a block size of 1536. **Recommendations** Update to Linux kernel version 6.6.43 or later to resolve the issue. As a temporary workaround, consider avoiding the use of block sizes that are not a power of 2 and are between 512 and PAGE SIZE to minimize the risk of exploitation.