Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-53131— nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于nilfs2文件系统中在使用block_touch_buffer tracepoint时可能导致的空指针解引用问题。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.24% · P14

Possible ATT&CK Techniques 1 AI

T1211 · Exploitation for Stealth

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 5305cb830834549b9203ad4d009ad5483c5e293f< 085556bf8c70e2629e02e79268dac3016a08b8bf affected
5305cb830834549b9203ad4d009ad5483c5e293f< 6438f3f42cda825f6f59b4e45ac3a1da28a6f2c9 affected
5305cb830834549b9203ad4d009ad5483c5e293f< b017697a517f8779ada4e8ce1c2c75dbf60a2636 affected
5305cb830834549b9203ad4d009ad5483c5e293f< 19c71cdd77973f99a9adc3190130bc3aa7ae5423 affected
5305cb830834549b9203ad4d009ad5483c5e293f< 3b2a4fd9bbee77afdd3ed5a05a0c02b6cde8d3b9 affected
5305cb830834549b9203ad4d009ad5483c5e293f< 59b49ca67cca7b007a5afd3de0283c8008157665 affected
5305cb830834549b9203ad4d009ad5483c5e293f< 77e47f89d32c2d72eb33d0becbce7abe14d061f4 affected
5305cb830834549b9203ad4d009ad5483c5e293f< cd45e963e44b0f10d90b9e6c0e8b4f47f3c92471 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-53131

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints". This series fixes null pointer dereference bugs that occur when using nilfs2 and two block-related tracepoints. This patch (of 2): It has been reported that when using "block:block_touch_buffer" tracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a NULL pointer dereference, or a general protection fault when KASAN is enabled. This happens because since the tracepoint was added in touch_buffer(), it references the dev_t member bh->b_bdev->bd_dev regardless of whether the buffer head has a pointer to a block_device structure. In the current implementation, the block_device structure is set after the function returns to the caller. Here, touch_buffer() is used to mark the folio/page that owns the buffer head as accessed, but the common search helper for folio/page used by the caller function was optimized to mark the folio/page as accessed when it was reimplemented a long time ago, eliminating the need to call touch_buffer() here in the first place. So this solves the issue by eliminating the touch_buffer() call itself.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于nilfs2文件系统中在使用block_touch_buffer tracepoint时可能导致的空指针解引用问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 5305cb830834549b9203ad4d009ad5483c5e293f ~ 085556bf8c70e2629e02e79268dac3016a08b8bf -
Linux Linux 3.9 -

II. Public POCs for CVE-2024-53131

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-53131

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-53131 (8)

Same Patch Batch · Linux · 2024-12-04 · 16 CVEs total

CVE-2024-53138 9.8 CRITICAL net/mlx5e: kTLS, Fix incorrect page refcounting
CVE-2024-53135 8.8 HIGH KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN
CVE-2024-53125 7.8 HIGH bpf: sync_linked_regs() must preserve subreg_def
CVE-2024-53127 7.8 HIGH Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
CVE-2024-53133 7.8 HIGH drm/amd/display: Handle dml allocation failure to avoid crash
CVE-2024-53139 7.8 HIGH sctp: fix possible UAF in sctp_v6_available()
CVE-2024-53140 7.8 HIGH netlink: terminate outstanding dump on socket close
CVE-2024-53136 7.5 HIGH mm: revert "mm: shmem: fix data-race in shmem_getattr()"
CVE-2024-53126 7.1 HIGH vdpa: solidrun: Fix UB bug with devres
CVE-2024-53128 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
CVE-2024-53129 drm/rockchip: vop: Fix a dereferenced before check warning
CVE-2024-53130 nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
CVE-2024-53132 drm/xe/oa: Fix "Missing outer runtime PM protection" warning
CVE-2024-53134 pmdomain: imx93-blk-ctrl: correct remove path
CVE-2024-53137 ARM: fix cacheflush with PAN

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-53131

No comments yet

Leave a comment