CVE-2024-48881bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
Updated under an hour ago ()
Does this affect you?
It affects Linux and 7 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again Commit 028ddcac477b ("bcache: Remove unnecessary NULL point check in node allocations") leads a NULL pointer deference in cache_set_flush(). 1721 if (!IS_ERR_OR_NULL(c->root)) 1722 list_add(&c->root->list, &c->btree_cache); >From the above code in cache_set_flush(), if previous registration code fails before allocating c->root, it is possible c->root is NULL as what it is initialized. __bch_btree_node_alloc() never returns NULL but c->root is possible to be NULL at above line 1721. This patch replaces IS_ERR() by IS_ERR_OR_NULL() to fix this.
- CVSS
- 5.5 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-476
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | 0729029e647234fa1a94376b6edffec5c2cd75f6 builds before 4379c5828492a4c2a651c8f826a01453bd2b80b0; from db9439cef0b5efccf8021fe89f4953e0f901e85b before 336e30f32ae7c043fde0f6fa21586ff30bea9fe2; from 991e9c186a8ac6ab272a86e0ddc6f9733c38b867 before fb5fee35bdd18316a84b5f30881a24e1415e1464; from 68118c339c6e1e16ae017bef160dbe28a27ae9c8 before 5202391970ffbf81975251b3526b890ba027b715; from 028ddcac477b691dd9205c92f991cc15259d033e before cc05aa2c0117e20fa25a3c0d915f98b8f2e78667; 028ddcac477b691dd9205c92f991cc15259d033e builds before 5e0e913624bcd24f3de414475018d3023f060ee1; from 028ddcac477b691dd9205c92f991cc15259d033e before b2e382ae12a63560fca35050498e19e760adf8c0; fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8; and 7 more ranges | CNA record |
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name) | from V3.1.0 before V3.1.5 | CISA ADP |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V3.2 | CISA ADP |
Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family siemens:scalance_xc_300_xr_300_xc_400_xr_500wg_xr_500_family (from the name) | before V3.2 | CISA ADP |
Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family siemens:scalance_xcm_xrm_xch_xrh_300_family (from the name) | before V3.2 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 4.19.291 before 4.20; from 5.4.251 before 5.4.287; from 5.10.188 before 5.10.231; from 5.15.121 before 5.15.174; from 6.1.39 before 6.1.120; from 6.4.4 before 6.6.66; from 6.7 before 6.12.5; 6.13 | NVD |
References
- https://git.kernel.org/stable/c/4379c5828492a4c2a651c8f826a01453bd2b80b0patch
- https://git.kernel.org/stable/c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2patch
- https://git.kernel.org/stable/c/fb5fee35bdd18316a84b5f30881a24e1415e1464patch
- https://git.kernel.org/stable/c/5202391970ffbf81975251b3526b890ba027b715patch
- https://git.kernel.org/stable/c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667patch
- https://git.kernel.org/stable/c/5e0e913624bcd24f3de414475018d3023f060ee1patch
- https://git.kernel.org/stable/c/b2e382ae12a63560fca35050498e19e760adf8c0patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.