Riskcovery

CVE-2024-39470

eventfs: Fix a possible null pointer dereference in eventfs_find_events()

State
Published
Severity
Not scored
Published
Jun 25, 2024
Updated
May 23, 2026
Reserved
Jun 25, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

eventfs: Fix a possible null pointer dereference in eventfs_find_events()

In function eventfs_find_events,there is a potential null pointer that may be caused by calling update_events_attr which will perform some operations on the members of the ei struct when ei is NULL.

Hence,When ei->is_freed is set,return NULL directly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 628adb842bd5e1c2c598534a7a022b8235289de6 to before 5ade5fbdbbb1f023bb70730ba4d74146c8bc7eb9Affected
  • 8186fff7ab649085e2c60d032d9a20a85af1d87c to before 7a1b2d138189375ed1dcd7d0851118230221bd1dAffected
  • 8186fff7ab649085e2c60d032d9a20a85af1d87c to before d4e9a968738bf66d3bb852dd5588d4c7afd6d7f4Affected
  • 9c2ac5e0ea7899411fd900d4681890722a020735Affected
  • 6.6.18 to before 6.6.34Affected
  • 6.7.4 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.6.34 through 6.6.*Not affected
  • 6.9.5 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.