In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY reported in bugzilla [1], Unable to handle kernel NULL pointer dereference at…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY reported in bugzilla [1], Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 pc : [0xffffffe51d249484] f2fs_is_cp_guaranteed+0x70/0x98 lr : [0xffffffe51d24adbc] f2fs_merge_page_bio+0x520/0x6d4 CPU: 3 UID: 0 PID: 6790 Comm: kworker/u16:3 Tainted: P B W OE 6.12.30-android16-5-maybe-dirty-4k #1 5f7701c9cbf727d1eebe77c89bbbeb3371e895e…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/01118321e0c8a5f3ece57d0d377bfc92d83cd210
- https://git.kernel.org/stable/c/edf7e9040fc52c922db947f9c6c36f07377c52ea
- https://git.kernel.org/stable/c/1f7b44b4a2b2939f08b279cbb9e6b5dcb8ffea32
- https://git.kernel.org/stable/c/410337c2301ae78a081e1b5ebbe8ec374fef4cb6
- https://git.kernel.org/stable/c/68e094232dfe5027c4fd2dcded93d2d6800bae04
- https://git.kernel.org/stable/c/7dd611131d82d7fc4212b555eb1103160bdad302
- https://git.kernel.org/stable/c/e193d8953647c8b575830852aa5ea0995b98d2b1
Timeline
- nvd_ingest NVD