CVE-2024-58058

ubifs: skip dumping tnc tree when zroot is null

State: Published
Severity: 5.5 Medium
Published: Mar 6, 2025
Updated: Oct 15, 2026
Reserved: Mar 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ubifs: skip dumping tnc tree when zroot is null

Clearing slab cache will free all znode in memory and make c->zroot.znode = NULL, then dumping tnc tree will access c->zroot.znode which cause null pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 428aff8f7cfb0d9a8854477648022cef96bcab28Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 6211c11fc20424bbc6d79c835c7c212b553ae898Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 1787cd67bb94b106555ffe64f887f6aa24b47010Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before e01b55f261ccc96e347eba4931e4429d080d879dAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 40e25a3c0063935763717877bb2a814c081509ffAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 77e5266e3d3faa6bdcf20d9c68a8972f6aa06522Affected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 2a987950df825d0144370e700dc5fb337684ffbaAffected 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before bdb0ca39e0acccf6771db49c3f94ed787d05f2d7Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.76 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 428aff8f7cfb0d9a8854477648022cef96bcab28Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 6211c11fc20424bbc6d79c835c7c212b553ae898Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 1787cd67bb94b106555ffe64f887f6aa24b47010Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before e01b55f261ccc96e347eba4931e4429d080d879dAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 40e25a3c0063935763717877bb2a814c081509ffAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 77e5266e3d3faa6bdcf20d9c68a8972f6aa06522Affected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before 2a987950df825d0144370e700dc5fb337684ffbaAffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to before bdb0ca39e0acccf6771db49c3f94ed787d05f2d7Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.76 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.