CVE-2024-42079

Source
https://cve.org/CVERecord?id=CVE-2024-42079
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42079.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42079
Downstream
Related
Published
2024-07-29T15:52:41.360Z
Modified
2026-05-28T03:54:08.130378705Z
Summary
gfs2: Fix NULL pointer dereference in gfs2_log_flush
Details

In the Linux kernel, the following vulnerability has been resolved:

gfs2: Fix NULL pointer dereference in gfs2logflush

In gfs2jindexfree(), set sdp->sdjdesc to NULL under the log flush lock to provide exclusion against gfs2log_flush().

In gfs2logflush(), check if sdp->sdjdesc is non-NULL before dereferencing it. Otherwise, we could run into a NULL pointer dereference when outstanding glock work races with an unmount (glockworkfunc -> runqueue -> doxmote -> inodegosync -> gfs2log_flush).

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42079.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
82218943058d5e3fe692a38b5a549479738dab33
Fixed
c3c5cfa3170c0940bc66a142859caac07d19b9d6
Fixed
5f6a84cfb33b34610623857bd93919dcb661e29b
Fixed
3429ef5f50909cee9e498c50f0c499b9397116ce
Fixed
f54f9d5368a4e92ede7dd078a62788dae3a7c6ef
Fixed
35264909e9d1973ab9aaa2a1b07cda70f12bb828

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42079.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.12.0
Fixed
5.15.200
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.162
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.37
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.8

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42079.json"