n the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasd_eckd_dump_sense() that leads to a kernel panic in error cases. When using indirect addressing for DASD CCWs (IDAW) the CCW CDA pointer does not contain the data address itself but a pointer to the IDAL. This needs to be translated from physical to virtual as well before using it. This dereferencing is also used for dasd_page_cache and also fixed although it is very unlikely that this code path ever gets used.
Configuration 1 (hide)
|
25 Sep 2025, 20:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/b3a58f3b90f564f42a5c35778d8c5107b2c2150b - Patch | |
| References | () https://git.kernel.org/stable/c/c116475f7d6410b1e6d399207ac75de6cf9c3652 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-476 | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
21 Nov 2024, 09:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/b3a58f3b90f564f42a5c35778d8c5107b2c2150b - | |
| References | () https://git.kernel.org/stable/c/c116475f7d6410b1e6d399207ac75de6cf9c3652 - |
30 Jul 2024, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2024-07-30 08:15
Updated : 2025-09-25 20:13
NVD link : CVE-2024-42099
Mitre link : CVE-2024-42099
CVE.ORG link : CVE-2024-42099
JSON object : View
NULL Pointer Dereference