CVE-2024-49957

kernel: ocfs2: fix null-ptr-deref when journal load failed.

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 21, 2024

Updated · October 29, 2026

Description

A flaw was found in the OCFS2 (Oracle Cluster File System version 2) component of the Linux kernel. During the mounting process, a local attacker could trigger a null-pointer dereference by providing a specially crafted or corrupted journal. This vulnerability occurs when the journal fails to load correctly due to an insufficient journal size, leading to a system crash and a Denial of Service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference