NULL pointer dereference in Linux kernel - CVE-2024-46742

Vulnerability identifier: #VU97527

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-46742

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the parse_durable_handle_context() and smb2_open() functions in fs/smb/server/smb2pdu.c, within the create_lease_buf() function in fs/smb/server/oplock.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Debian Linux
Ubuntu
openEuler
python3-perf-debuginfo
kernel
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-source
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
kernel-tools
bpftool-debuginfo
bpftool
linux-aws-fips (Ubuntu package)
linux (Ubuntu package)
linux-xilinx-zynqmp (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-raspi (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-kvm (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-azure (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux (Debian package)
IBM Security Guardium

Install update from vendor's website.

Linux kernel - addressed in versions 5.15.181, 6.1.135, 6.6.51, 6.10.10, 6.11
python3-perf-debuginfo - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-debuginfo - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-debugsource - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-devel - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-headers - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-source - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-tools-debuginfo - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-tools-devel - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
perf - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
perf-debuginfo - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
python3-perf - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
kernel-tools - addressed in versions 5.10.0-136.96.0.177, 5.10.0-230.0.0.129, 5.10.0-230.0.0.132, 6.6.0-44.0.0.50
bpftool-debuginfo - addressed in versions 5.10.0-230.0.0.129, 6.6.0-44.0.0.50
bpftool - addressed in versions 5.10.0-230.0.0.129, 6.6.0-44.0.0.50
linux-aws-fips (Ubuntu package) - addressed in versions 5.15.0.144.84, 5.15.0-144.157+fips1, 5.15.0.1087.77, 5.15.0-1087.96+fips1, 5.15.0.1088.84, 5.15.0-1088.95+fips1
linux (Ubuntu package) - addressed in versions 5.15.0.144.130, 5.15.0.144.141, 5.15.0-144.157, 5.15.0.144.157~20.04.1, 5.15.0-144.157~20.04.1, 5.15.0-1030.30, 5.15.0.1030.32, 5.15.0-1041.41, 5.15.0.1041.41, 5.15.0-1041.41~20.04.1, 5.15.0.1041.41~20.04.1, 5.15.0.1070.69, 5.15.0-1070.78, 5.15.0.1080.76, 5.15.0-1080.83, 5.15.0-1080.83~20.04.1, 5.15.0.1080.83~20.04.1, 5.15.0.1082.82, 5.15.0-1082.83, 5.15.0.1083.83, 5.15.0-1083.89, 5.15.0.1085.81, 5.15.0.1085.84, 5.15.0-1085.91, 5.15.0-1085.91~20.04.3, 5.15.0.1085.91~20.04.3, 5.15.0.1087.83, 5.15.0-1087.96, 5.15.0.1087.96~20.04.1, 5.15.0-1087.96~20.04.2, 5.15.0.1088.91, 5.15.0-1088.95, 5.15.0-1088.95~20.04.1, 5.15.0.1088.95~20.04.1
linux-xilinx-zynqmp (Ubuntu package) - addressed in versions 5.15.0.1052.55, 5.15.0-1052.56
linux-intel-iot-realtime (Ubuntu package) - addressed in versions 5.15.0-1081.83, 5.15.0.1081.85, 5.15.0.1088.92, 5.15.0-1088.97
linux-raspi (Ubuntu package) - addressed in versions 5.15.0.1083.81, 5.15.0-1083.86
linux-intel-iotg-5.15 (Ubuntu package) - addressed in versions 5.15.0-1083.89~20.04.1, 5.15.0.1083.89~20.04.1
linux-kvm (Ubuntu package) - addressed in versions 5.15.0.1084.80, 5.15.0-1084.89
linux-azure-fips (Ubuntu package) - addressed in versions 5.15.0.1094.79, 5.15.0-1094.103+fips1
linux-azure (Ubuntu package) - addressed in versions 5.15.0.1094.92, 5.15.0-1094.103
linux-azure-5.15 (Ubuntu package) - addressed in versions 5.15.0-1094.103~20.04.1, 5.15.0.1094.103~20.04.1
linux (Debian package) - update to 6.1.135-1
IBM Security Guardium - addressed in versions 12.0p31, 12.0p106

• https://git.kernel.org/stable/c/07f384c5be1f8633b13f0a22616e227570450bc6
• https://git.kernel.org/stable/c/3b692794b81f2ecad69a4adbba687f3836824ada
• https://git.kernel.org/stable/c/4e8771a3666c8f216eefd6bd2fd50121c6c437db
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.181
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.135
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.10
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.11
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.51

• NULL pointer dereference in Linux kernel smb server
• openEuler 22.03 LTS SP3 update for kernel
• openEuler 22.03 LTS SP4 update for kernel
• openEuler 24.03 LTS update for kernel
• openEuler 22.03 LTS SP1 update for kernel
• Multiple vulnerabilities in IBM Security Guardium
• Debian update for linux
• Ubuntu update for linux-aws-fips
• Ubuntu update for linux-intel-iot-realtime
• Ubuntu update for linux
• Ubuntu update for linux-intel-iotg-5.15
• Ubuntu update for linux-kvm
• Ubuntu update for linux-xilinx-zynqmp
• Ubuntu update for linux-azure
• Ubuntu update for linux-azure-fips
• Ubuntu update for linux-raspi
• Ubuntu update for linux-azure-5.15