CVE-2024-43859

kernel: f2fs: fix to truncate preallocated blocks in f2fs_file_open()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 17, 2024

Updated · February 2, 2026

Description

f2fs, fix to truncate preallocated blocks in f2fs_file_open(). Unable to handle kernel NULL pointer dereference at virtual address 0000000000000011. It is because inode.i_crypt_info is not initialized during certain path. Fix should relocate truncation of preallocated blocks to f2fs_file_open() after fscrypt_file_open().

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference