CVE-2024-43859 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference17 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 87.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
LinuxLinux KernelDebian Linux+5 more
Timeline
PublishedAug 17
Latest updateMar 1

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate preallocated blocks in f2fs_file_open() chenyuwen reports a f2fs bug as below: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000011 fscrypt_set_bio_crypt_ctx+0x78/0x1e8 f2fs_grab_read_bio+0x78/0x208 f2fs_submit_page_read+0x44/0x154 f2fs_get_read_data_page+0x288/0x5f4 f2fs_get_lock_data_page+0x60/0x190 truncate_partial_data_page+0x108/0x4fc f2fs_do_truncate_blocks+0x344/0x5…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

▶NVDlinux/linux_kernel5.17 — 6.6.44+1
▶Debianlinux/linux_kernel< 6.1.112-1+2
▶Ubuntulinux/linux_kernel< 6.8.0-50.51

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

8
OSV
CVE-2024-43859: In multiple locations, there is a possible persistent denial of service due to uninitialized data↗2026-03-01
▶
OSV
linux-azure, linux-azure-6.8 vulnerabilities↗2025-01-09
▶
OSV
linux-hwe-6.8 vulnerabilities↗2025-01-06
▶
OSV
linux-gkeop vulnerabilities↗2024-12-12
▶
OSV
linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities↗2024-12-12
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (Azure) vulnerabilities↗2025-01-09
▶
Ubuntu
Linux kernel (HWE) vulnerabilities↗2025-01-06
▶
Ubuntu
Linux kernel (GKE) vulnerabilities↗2024-12-12
▶
Ubuntu
Linux kernel (NVIDIA) vulnerabilities↗2024-12-12
▶
Ubuntu
Linux kernel vulnerabilities↗2024-12-12
▶
CVE-2024-43859 — NULL Pointer Dereference in Linux | cvebase