CVE-2024-39470

Source
https://cve.org/CVERecord?id=CVE-2024-39470
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39470.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-39470
Downstream
BELL (1)
DEBIAN (1)
MGASA (2)
OESA (1)
UBUNTU (1)
Published
2024-06-25T14:28:56Z
Modified
2026-10-20T10:30:17Z
Summary
eventfs: Fix a possible null pointer dereference in eventfs_find_events()
Details

In the Linux kernel, the following vulnerability has been resolved:

eventfs: Fix a possible null pointer dereference in eventfs_find_events()

In function eventfs_find_events,there is a potential null pointer that may be caused by calling update_events_attr which will perform some operations on the members of the ei struct when ei is NULL.

Hence,When ei->is_freed is set,return NULL directly.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39470.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
628adb842bd5e1c2c598534a7a022b8235289de6
Fixed
5ade5fbdbbb1f023bb70730ba4d74146c8bc7eb9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8186fff7ab649085e2c60d032d9a20a85af1d87c
Fixed
7a1b2d138189375ed1dcd7d0851118230221bd1d
Fixed
d4e9a968738bf66d3bb852dd5588d4c7afd6d7f4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.6.18
Fixed
6.6.34
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.7.4
Fixed
6.8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9c2ac5e0ea7899411fd900d4681890722a020735

Affected versions

v6.*
v6.6.18
v6.6.19
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.7.10
v6.7.11
v6.7.12
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39470.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.6.34
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39470.json"