CVE-2024-50265

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()

Syzkaller is able to provoke null-ptr-dereference in ocfs2_xa_remove():

[ 57.319872] (a.out,1161,7):ocfs2_xa_remove:2028 ERROR: status = -12

[ 57.320420] (a.out,1161,7):ocfs2_xa_cleanup_value_truncate:1999 ERROR: Partial truncate while removing xattr overlay.upper. Leaking 1 clusters and removing the entry

[ 57.321727] BUG: kernel NULL pointer dereference, address: 0000000000000004

[...]

[ 57.325727] RIP: 0010:ocfs2_xa_block_wipe_namevalue+0x2a/0xc0

[...]

[ 57.331328] Call Trace:

[ 57.331477] <TASK>

[...]

[ 57.333511] ? do_user_addr_fault+0x3e5/0x740

[ 57.333778] ? exc_page_fault+0x70/0x170

[ 57.334016] ? asm_exc_page_fault+0x2b/0x30

[ 57.334263] ? __pfx_ocfs2_xa_block_wipe_namevalue+0x10/0x10

[ 57.334596] ? ocfs2_xa_block_wipe_namevalue+0x2a/0xc0

[ 57.334913] ocfs2_xa_remove_entry+0x23/0xc0

[ 57.335164]

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References