Riskcovery

CVE-2024-26632

block: Fix iterating over an empty bio with bio_for_each_folio_all

State
Published
Severity
7.8 High
Published
Mar 18, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: Fix iterating over an empty bio with bio_for_each_folio_all

If the bio contains no data, bio_first_folio() calls page_folio() on a NULL pointer and oopses. Move the test that we've reached the end of the bio from bio_next_folio() to bio_first_folio().

[axboe: add unlikely() to error case]

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 640d1930bef4f87ec8d8d2b05f0f6edc1dfcf662 to before c6350b5cb78e9024c49eaee6fdb914ad2903a5feAffected
  • 640d1930bef4f87ec8d8d2b05f0f6edc1dfcf662 to before a6bd8182137a12d22d3f2cee463271bdcb491659Affected
  • 640d1930bef4f87ec8d8d2b05f0f6edc1dfcf662 to before ca3ede3f5893e2d26d4dbdef1eec28a8487fafdeAffected
  • 640d1930bef4f87ec8d8d2b05f0f6edc1dfcf662 to before 7bed6f3d08b7af27b7015da8dc3acf2b9c1f21d7Affected
LinuxLinux
  • 5.17Affected
  • before 5.17Not affected
  • 6.1.75 through 6.1.*Not affected
  • 6.6.14 through 6.6.*Not affected
  • 6.7.2 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.