CVE-2024-27025

nbd: null check for nla_nest_start

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: Oct 15, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nbd: null check for nla_nest_start

nla_nest_start() may fail and return NULL. Insert a check and set errno based on other call sites within the same source code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 44214d744be32a4769faebba764510888f1eb19eAffected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 4af837db0fd3679fabc7b7758397090b0c06dcedAffected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 98e60b538e66c90b9a856828c71d4e975ebfa797Affected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 96436365e5d80d0106ea785a4f80a58e7c9edff8Affected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before b7f5aed55829f376e4f7e5ea5b80ccdcb023e983Affected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before e803040b368d046434fbc8a91945c690332c4fcfAffected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before ba6a9970ce9e284cbc04099361c58731e308596aAffected 47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 31edf4bbe0ba27fd03ac7d87eb2ee3d2a231af6dAffected
LinuxLinux	4.12Affected before 4.12Not affected 5.4.273 through 5.4.Not affected 5.10.214 through 5.10.Not affected 5.15.153 through 5.15.Not affected 6.1.83 through 6.1.Not affected 6.6.23 through 6.6.Not affected 6.7.11 through 6.7.Not affected 6.8.2 through 6.8.*Not affected 6.9 and laterNot affected

Product

Versions

LinuxLinux

47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 44214d744be32a4769faebba764510888f1eb19eAffected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 4af837db0fd3679fabc7b7758397090b0c06dcedAffected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 98e60b538e66c90b9a856828c71d4e975ebfa797Affected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 96436365e5d80d0106ea785a4f80a58e7c9edff8Affected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before b7f5aed55829f376e4f7e5ea5b80ccdcb023e983Affected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before e803040b368d046434fbc8a91945c690332c4fcfAffected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before ba6a9970ce9e284cbc04099361c58731e308596aAffected
47d902b90a32a42a3d33aef3a02170fc6f70aa23 to before 31edf4bbe0ba27fd03ac7d87eb2ee3d2a231af6dAffected

LinuxLinux

4.12Affected
before 4.12Not affected
5.4.273 through 5.4.*Not affected
5.10.214 through 5.10.*Not affected
5.15.153 through 5.15.*Not affected
6.1.83 through 6.1.*Not affected
6.6.23 through 6.6.*Not affected
6.7.11 through 6.7.*Not affected
6.8.2 through 6.8.*Not affected
6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.