NULL pointer dereference in Linux kernel - CVE-2024-57925

Vulnerability identifier: #VU103019

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57925

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the smb2_send_interim_resp() function in fs/smb/server/smb2pdu.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Debian Linux
Ubuntu
openEuler
linux-image-aws-fips (Ubuntu package)
linux-image-fips (Ubuntu package)
linux-image-intel-iot-realtime (Ubuntu package)
linux-image-5.15.0-1083-azure-fips (Ubuntu package)
linux-image-5.15.0-1079-gcp-fips (Ubuntu package)
linux-image-5.15.0-1073-intel-iot-realtime (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-5.15.0-135-generic (Ubuntu package)
linux-image-5.15.0-135-generic-64k (Ubuntu package)
linux-image-5.15.0-135-generic-lpae (Ubuntu package)
linux-image-5.15.0-135-lowlatency (Ubuntu package)
linux-image-5.15.0-135-lowlatency-64k (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-136-generic-lpae (Ubuntu package)
linux-image-5.15.0-136-generic-64k (Ubuntu package)
linux-image-5.15.0-136-generic (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-5.15.0-1021-nvidia-tegra-igx (Ubuntu package)
linux-image-5.15.0-1021-nvidia-tegra-igx-rt (Ubuntu package)
linux-image-nvidia-tegra-igx (Ubuntu package)
linux-image-nvidia-tegra-igx-rt (Ubuntu package)
linux-image-5.15.0-1033-nvidia-tegra (Ubuntu package)
linux-image-5.15.0-1033-nvidia-tegra-rt (Ubuntu package)
linux-image-nvidia-tegra (Ubuntu package)
linux-image-nvidia-tegra-rt (Ubuntu package)
linux-image-5.15.0-1044-xilinx-zynqmp (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1062-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-5.15.0-1072-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1074-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1074-nvidia (Ubuntu package)
linux-image-5.15.0-1074-raspi (Ubuntu package)
linux-image-5.15.0-1074-ibm (Ubuntu package)
linux-image-5.15.0-1075-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.15.0-1076-kvm (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1077-gke (Ubuntu package)
linux-image-5.15.0-1077-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1077-intel-iotg (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1079-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1080-aws (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.15.0-1081-gcp (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1084-azure (Ubuntu package)
linux-image-5.15.0-1086-azure (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1086-azure-fde (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux (Debian package)
kernel-source
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
python3-perf-debuginfo
linux (Ubuntu package)
linux-hwe-6.8 (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure-nvidia (Ubuntu package)
linux-gke (Ubuntu package)
linux-oracle-6.8 (Ubuntu package)
linux-azure (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-realtime (Ubuntu package)
linux-image-virtual-hwe-24.04 (Ubuntu package)
linux-image-oem-24.04a (Ubuntu package)
linux-image-oem-24.04 (Ubuntu package)
linux-image-generic-hwe-24.04 (Ubuntu package)
linux-image-generic-64k-hwe-24.04 (Ubuntu package)
linux-image-6.11.0-21-generic-64k (Ubuntu package)
linux-image-6.11.0-21-generic (Ubuntu package)
linux-image-realtime-hwe-24.04 (Ubuntu package)
linux-image-realtime (Ubuntu package)
linux-image-6.11.0-1007-realtime (Ubuntu package)
linux-image-6.11.0-1010-raspi (Ubuntu package)
linux-image-6.11.0-1011-gcp-64k (Ubuntu package)
linux-image-gcp-64k (Ubuntu package)
linux-image-6.11.0-1011-gcp (Ubuntu package)
linux-image-6.11.0-1011-aws (Ubuntu package)
linux-image-6.11.0-1011-lowlatency (Ubuntu package)
linux-image-6.11.0-1011-lowlatency-64k (Ubuntu package)
linux-image-lowlatency-hwe-24.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-24.04 (Ubuntu package)
linux-image-6.11.0-1012-azure-fde (Ubuntu package)
linux-image-6.11.0-1012-azure (Ubuntu package)
linux-image-6.11.0-1013-oracle (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-6.11.0-1013-oracle-64k (Ubuntu package)
linux-image-oem-24.04b (Ubuntu package)
linux-image-6.11.0-1017-oem (Ubuntu package)
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)

Install update from vendor's website.

Linux kernel - update to 6.1.125
linux-image-aws-fips (Ubuntu package) - update to linux-image-azure-fips
linux-image-fips (Ubuntu package) - update to linux-image-gcp-fips
linux-image-intel-iot-realtime (Ubuntu package) - update to linux-image-realtime
linux-image-5.15.0-1083-azure-fips (Ubuntu package) - update to linux-image-5.15.0-135-fips
linux-image-5.15.0-1079-gcp-fips (Ubuntu package) - update to linux-image-5.15.0-1080-aws-fips
linux-image-5.15.0-1073-intel-iot-realtime (Ubuntu package) - update to linux-image-5.15.0-1080-realtime
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.15.0.135.122, 6.11.0-1011.12
linux-image-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0.135.122, 6.11.0-1011.12
linux-image-generic-lpae (Ubuntu package) - update to 5.15.0.135.133
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.135.133, 6.11.0-21.21
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.135.133, 6.11.0-21.21
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.135.133, 6.11.0-21.21
linux-image-5.15.0-135-generic (Ubuntu package) - update to 5.15.0-135.146
linux-image-5.15.0-135-generic-64k (Ubuntu package) - update to 5.15.0-135.146
linux-image-5.15.0-135-generic-lpae (Ubuntu package) - update to 5.15.0-135.146
linux-image-5.15.0-135-lowlatency (Ubuntu package) - addressed in versions 5.15.0-135.146, 5.15.0-135.146~20.04.1
linux-image-5.15.0-135-lowlatency-64k (Ubuntu package) - addressed in versions 5.15.0-135.146, 5.15.0-135.146~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.135.146~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.135.146~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-5.15.0-136-generic-lpae (Ubuntu package) - update to 5.15.0-136.147~20.04.1
linux-image-5.15.0-136-generic-64k (Ubuntu package) - update to 5.15.0-136.147~20.04.1
linux-image-5.15.0-136-generic (Ubuntu package) - update to 5.15.0-136.147~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.136.147~20.04.1
linux-image-5.15.0-1021-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1021.21
linux-image-5.15.0-1021-nvidia-tegra-igx-rt (Ubuntu package) - update to 5.15.0-1021.21
linux-image-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0.1021.23
linux-image-nvidia-tegra-igx-rt (Ubuntu package) - update to 5.15.0.1021.23
linux-image-5.15.0-1033-nvidia-tegra (Ubuntu package) - update to 5.15.0-1033.33
linux-image-5.15.0-1033-nvidia-tegra-rt (Ubuntu package) - update to 5.15.0-1033.33
linux-image-nvidia-tegra (Ubuntu package) - update to 5.15.0.1033.33
linux-image-nvidia-tegra-rt (Ubuntu package) - update to 5.15.0.1033.33
linux-image-5.15.0-1044-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1044.48
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.15.0.1044.48
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1062.61
linux-image-gkeop-5.15 (Ubuntu package) - update to 5.15.0.1062.61
linux-image-5.15.0-1062-gkeop (Ubuntu package) - update to 5.15.0-1062.70
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1072.68, 5.15.0.1074.77~20.04.1
linux-image-5.15.0-1072-ibm (Ubuntu package) - update to 5.15.0-1072.75
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1074.72
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1074.72, 6.11.0-1010.10
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1074.74
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1074.74
linux-image-5.15.0-1074-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1074.75
linux-image-5.15.0-1074-nvidia (Ubuntu package) - update to 5.15.0-1074.75
linux-image-5.15.0-1074-raspi (Ubuntu package) - update to 5.15.0-1074.77
linux-image-5.15.0-1074-ibm (Ubuntu package) - update to 5.15.0-1074.77~20.04.1
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1075.75, 5.15.0.1077.83~20.04.1
linux-image-5.15.0-1075-intel-iotg (Ubuntu package) - update to 5.15.0-1075.81
linux-image-kvm (Ubuntu package) - update to 5.15.0.1076.72
linux-image-5.15.0-1076-kvm (Ubuntu package) - update to 5.15.0-1076.81
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1077.73
linux-image-gke (Ubuntu package) - update to 5.15.0.1077.76
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1077.76
linux-image-5.15.0-1077-gke (Ubuntu package) - update to 5.15.0-1077.83
linux-image-5.15.0-1077-oracle (Ubuntu package) - addressed in versions 5.15.0-1077.83, 5.15.0-1077.83~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1077.83~20.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1077.83~20.04.1, 6.11.0-1013.14
linux-image-5.15.0-1077-intel-iotg (Ubuntu package) - update to 5.15.0-1077.83~20.04.1
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1079.75
linux-image-5.15.0-1079-gcp (Ubuntu package) - update to 5.15.0-1079.88
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1080.82
linux-image-5.15.0-1080-aws (Ubuntu package) - update to 5.15.0-1080.87~20.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1080.87~20.04.1, 6.11.0-1011.12
linux-image-5.15.0-1081-gcp (Ubuntu package) - update to 5.15.0-1081.90~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1081.90~20.04.1, 6.11.0-1011.11
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1084.82
linux-image-5.15.0-1084-azure (Ubuntu package) - update to 5.15.0-1084.93
linux-image-5.15.0-1086-azure (Ubuntu package) - update to 5.15.0-1086.95~20.04.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1086.95~20.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1086.95~20.04.1, 6.11.0-1012.12
linux-image-5.15.0-1086-azure-fde (Ubuntu package) - update to 5.15.0-1086.95~20.04.1.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1086.95~20.04.1.61, 6.11.0-1012.12
linux (Debian package) - update to 6.1.128-1
kernel-source - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
bpftool - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
bpftool-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-debugsource - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-devel - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-headers - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-tools - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-tools-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
kernel-tools-devel - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
perf - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
perf-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
python3-perf - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
python3-perf-debuginfo - addressed in versions 6.6.0-77.0.0.70, 6.6.0-77.0.0.81
linux (Ubuntu package) - addressed in versions 6.8.0-60.63, 6.8.0-60.63.1, 6.8.0-60.63.1~22.04.1, 6.8.0-1026.26, 6.8.0-1026.27, 6.8.0-1029.31, 6.8.0-1029.31~22.04.1
linux-hwe-6.8 (Ubuntu package) - update to 6.8.0-60.63~22.04.1
linux-gcp (Ubuntu package) - addressed in versions 6.8.0-1012.14, 6.8.0-1030.32, 6.8.0-1030.32~22.04.1
linux-azure-nvidia (Ubuntu package) - update to 6.8.0-1016.17
linux-gke (Ubuntu package) - update to 6.8.0-1025.29
linux-oracle-6.8 (Ubuntu package) - update to 6.8.0-1026.27~22.04.1
linux-azure (Ubuntu package) - addressed in versions 6.8.0-1028.28, 6.8.0-1029.34, 6.8.0-1029.34~22.04.1
linux-nvidia (Ubuntu package) - addressed in versions 6.8.0-1028.31, 6.8.0-1028.31.1, 6.8.0-1028.31~22.04.1
linux-realtime (Ubuntu package) - update to 6.8.1-1022.23
linux-image-virtual-hwe-24.04 (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1
linux-image-oem-24.04a (Ubuntu package) - update to 6.11.0-21.21
linux-image-oem-24.04 (Ubuntu package) - update to 6.11.0-21.21
linux-image-generic-hwe-24.04 (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1
linux-image-generic-64k-hwe-24.04 (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1
linux-image-6.11.0-21-generic-64k (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1+1
linux-image-6.11.0-21-generic (Ubuntu package) - addressed in versions 6.11.0-21.21, 6.11.0-21.21~24.04.1+1
linux-image-realtime-hwe-24.04 (Ubuntu package) - update to 6.11.0-1007.7
linux-image-realtime (Ubuntu package) - update to 6.11.0-1007.7
linux-image-6.11.0-1007-realtime (Ubuntu package) - update to 6.11.0-1007.7
linux-image-6.11.0-1010-raspi (Ubuntu package) - update to 6.11.0-1010.10
linux-image-6.11.0-1011-gcp-64k (Ubuntu package) - update to 6.11.0-1011.11
linux-image-gcp-64k (Ubuntu package) - update to 6.11.0-1011.11
linux-image-6.11.0-1011-gcp (Ubuntu package) - update to 6.11.0-1011.11
linux-image-6.11.0-1011-aws (Ubuntu package) - update to 6.11.0-1011.12
linux-image-6.11.0-1011-lowlatency (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-6.11.0-1011-lowlatency-64k (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-lowlatency-hwe-24.04 (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-lowlatency-64k-hwe-24.04 (Ubuntu package) - update to 6.11.0-1011.12~24.04.1
linux-image-6.11.0-1012-azure-fde (Ubuntu package) - update to 6.11.0-1012.12
linux-image-6.11.0-1012-azure (Ubuntu package) - update to 6.11.0-1012.12
linux-image-6.11.0-1013-oracle (Ubuntu package) - update to 6.11.0-1013.14
linux-image-oracle-64k (Ubuntu package) - update to 6.11.0-1013.14
linux-image-6.11.0-1013-oracle-64k (Ubuntu package) - update to 6.11.0-1013.14
linux-image-oem-24.04b (Ubuntu package) - update to 6.11.0-1017.17
linux-image-6.11.0-1017-oem (Ubuntu package) - update to 6.11.0-1017.17

• https://git.kernel.org/stable/c/271ae0edbfc942795c162e6cf20d2bc02bd7fde4
• https://git.kernel.org/stable/c/2976e91a3e569cf2c92c9f71512c0ab1312fe965
• https://git.kernel.org/stable/c/4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7c
• https://git.kernel.org/stable/c/ee7e40f7fb17f08a8cbae50553e5c2e10ae32fce
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.125

• NULL pointer dereference in Linux kernel smb server
• Debian update for linux
• openEuler 24.03 LTS SP1 update for kernel
• openEuler 24.03 LTS update for kernel
• Ubuntu update for linux-oem-6.11
• Ubuntu update for linux-lowlatency-hwe-6.11
• Ubuntu update for linux-lowlatency
• Ubuntu update for linux
• Ubuntu update for linux-aws-5.15
• Ubuntu update for linux
• Ubuntu update for linux-aws-fips
• Ubuntu update for linux-intel-iot-realtime
• Ubuntu update for linux-xilinx-zynqmp
• Ubuntu update for linux-nvidia-tegra
• Ubuntu update for linux-raspi
• Ubuntu update for linux-hwe-5.15
• Ubuntu update for linux-azure-5.15
• Ubuntu update for linux-intel-iotg-5.15
• Ubuntu update for linux-ibm-5.15
• Ubuntu update for linux-gcp-5.15
• Ubuntu update for linux-nvidia
• Ubuntu update for linux-gke
• Ubuntu update for linux-realtime
• Ubuntu update for linux
• Ubuntu update for linux-gcp
• Ubuntu update for linux-azure-nvidia
• Ubuntu update for linux-azure
• Ubuntu update for linux-hwe-6.8
• Ubuntu update for linux-oracle-6.8