SECUFOCUSNOW
Home›CVE index›CVE-2024-57929
Review reviewHigh

CVE-2024-57929

Linux Linux, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, linux kernel

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller of dm_bm_read_lock() should not operate on this invalid dm_block pointer, or it will lead to undefined result. For example, the dm_array_cursor incorrectly caches the invalid pointer on reading a faulty array block, causing a double release in dm_array_cursor_end(), then hitting the BUG_ON i...

CVSS
7.1
EPSS
-
- percentile
CISA KEV
Not listed
Published
2025.01.19
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller of dm_bm_read_lock() should not operate on this invalid dm_block pointer, or it will lead to undefined result. For example, the dm_array_cursor incorrectly caches the invalid pointer on reading a faulty array block, causing a double release in dm_array_cursor_end(), then hitting the BUG_ON i...

Affected product and versions

Product
Linux Linux, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, linux kernel
Affected versions
>= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < 9c7c03d0e926762adf3a3a0ba86156fb5e19538b, >= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < fc1ef07c3522e257e32702954f265debbcb096a7, >= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < 738994872d77e189b2d13c501a1d145e95d98f46, >= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < e477021d252c007f0c6d45b5d13d341efed03979, >= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < 6002bec5354f86d1a2df21468f68e3ec03ede9da, >= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < 017c4470bff53585370028fec9341247bad358ff, >= fdd1315aa5f022fe6574efdc2d9535f75a0ee255 < f2893c0804d86230ffb8f1c8703fdbb18648abc8, >= 4.9, >= 4.9 < 5.4.290, >= 5.5 < 5.10.234, >= 5.11 < 5.15.177, >= 5.16 < 6.1.125, >= 6.2 < 6.6.72, >= 6.7 < 6.12.10, 6.13
Fixed versions
5.4.290, 5.10.234, 5.15.177, 6.1.125, 6.6.72, 6.12.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE
CWE-672