CVE-2024-39371 io_uring: check for non-NULL file pointer in io_file_can_poll()

In the Linux kernel, the following vulnerability has been resolved: iouring: check for non-NULL file pointer in iofilecanpoll In earlier kernels, it was possible to trigger a NULL pointer dereference off the forced async preparation path, if no file had been assigned. The trace leading to that...

CVE-2024-39371

CVE-2024-39371 affects the Linux kernel io_uring path. The issue arises in io_file_can_poll() when a forced ASYNC request has a bad or unassigned file descriptor, potentially triggering a NULL pointer dereference via the forced async preparation path. The vulnerability is demonstrated in the trac...

CVE-2024-39371: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: iouring: check for non-NULL file pointer in iofilecanpoll In earlier kernels, it was possible to trigger a NULL pointer dereference off the forced async preparation path, if no file had been assigned. The trace leading to that...

PT-2024-28473

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A vulnerability in the Linux kernel has been resolved, which allowed a NULL pointer dereference off the forced async preparation path if no file had been assigned. This issue occurred because t...