CVE-2024-26878

quota: Fix potential NULL pointer dereference

State: Published
Severity: Not scored
Published: Apr 17, 2024
Updated: Oct 15, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

quota: Fix potential NULL pointer dereference

Below race may cause NULL pointer dereference

P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) ....

If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered.

So let's fix it by using a temporary pointer to avoid this issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 8514899c1a4edf802f03c408db901063aa3f05a1Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 49669f8e7eb053f91d239df7b1bfb4500255a9d0Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 61380537aa6dd32d8a723d98b8f1bd1b11d8fee0Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 1ca72a3de915f87232c9a4cb9bebbd3af8ed3e25Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 7f9e833fc0f9b47be503af012eb5903086939754Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 40a673b4b07efd6f74ff3ab60f38b26aa91ee5d5Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before f2649d98aa9ca8623149b3cb8df00c944f5655c7Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 6afc9f4434fa8063aa768c2bf5bf98583aee0877Affected 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before d0aa72604fbd80c8aabb46eda00535ed35570f1fAffected
LinuxLinux	4.14Affected before 4.14Not affected 4.19.311 through 4.19.Not affected 5.4.273 through 5.4.Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 8514899c1a4edf802f03c408db901063aa3f05a1Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 49669f8e7eb053f91d239df7b1bfb4500255a9d0Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 61380537aa6dd32d8a723d98b8f1bd1b11d8fee0Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 1ca72a3de915f87232c9a4cb9bebbd3af8ed3e25Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 7f9e833fc0f9b47be503af012eb5903086939754Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 40a673b4b07efd6f74ff3ab60f38b26aa91ee5d5Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before f2649d98aa9ca8623149b3cb8df00c944f5655c7Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before 6afc9f4434fa8063aa768c2bf5bf98583aee0877Affected
7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac to before d0aa72604fbd80c8aabb46eda00535ed35570f1fAffected

LinuxLinux

4.14Affected
before 4.14Not affected
4.19.311 through 4.19.*Not affected
5.4.273 through 5.4.*Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.