CVE-2024-53235

published 2024-12-27

CVE-2024-53235: In the Linux kernel, the following vulnerability has been resolved: erofs: fix file-backed mounts over FUSE syzbot reported a null-ptr-deref in…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix file-backed mounts over FUSE

syzbot reported a null-ptr-deref in fuse_read_args_fill:
fuse_read_folio+0xb0/0x100 fs/fuse/file.c:905
filemap_read_folio+0xc6/0x2a0 mm/filemap.c:2367
do_read_cache_folio+0x263/0x5c0 mm/filemap.c:3825
read_mapping_folio include/linux/pagemap.h:1011 [inline]
erofs_bread+0x34d/0x7e0 fs/erofs/data.c:41
erofs_read_superblock fs/erofs/super.c:281 [inline]
erofs_fc_fill_super+0x2b9/0x2500 fs/erofs/super.c:625

Unlike most filesystems, some network filesystems and FUSE need
unavoidable valid `file` pointers for their read I/Os [1].
Anyway, those use cases need to be supported too.

[1] https://docs.kernel.org/filesystems/vfs.html

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.12.3-1 (forky)	linux 6.12.3-1 (forky)
linux	linux	—	—
linux	linux	>= fb176750266a3d7f42ebdcf28e8ba40350b27847 < 5036f2f024cac40a02ea6ea70de2c3a4407d16bc	5036f2f024cac40a02ea6ea70de2c3a4407d16bc
linux	linux	>= fb176750266a3d7f42ebdcf28e8ba40350b27847 < 3a23787ca8756920d65fda39f41353a4be1d1642	3a23787ca8756920d65fda39f41353a4be1d1642
linux	linux_kernel	>= 0 < 6.12.3-1	6.12.3-1
linux	linux_kernel	>= 0 < 6.12.3-1	6.12.3-1
linux	linux_kernel	>= 6.12 < 6.12.2	6.12.2

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 LOW

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476