Executive Summary

Informations
Name CVE-2024-53235 First vendor Publication 2024-12-27
Vendor Cve Last vendor Modification 2025-01-07

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix file-backed mounts over FUSE

syzbot reported a null-ptr-deref in fuse_read_args_fill:
fuse_read_folio+0xb0/0x100 fs/fuse/file.c:905
filemap_read_folio+0xc6/0x2a0 mm/filemap.c:2367
do_read_cache_folio+0x263/0x5c0 mm/filemap.c:3825
read_mapping_folio include/linux/pagemap.h:1011 [inline]
erofs_bread+0x34d/0x7e0 fs/erofs/data.c:41
erofs_read_superblock fs/erofs/super.c:281 [inline]
erofs_fc_fill_super+0x2b9/0x2500 fs/erofs/super.c:625

Unlike most filesystems, some network filesystems and FUSE need unavoidable valid `file` pointers for their read I/Os [1]. Anyway, those use cases need to be supported too.

[1] https://docs.kernel.org/filesystems/vfs.html

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53235

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3700

Sources (Detail)

https://git.kernel.org/stable/c/3a23787ca8756920d65fda39f41353a4be1d1642
https://git.kernel.org/stable/c/5036f2f024cac40a02ea6ea70de2c3a4407d16bc
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2025-07-15 02:40:43
  • Multiple Updates
2025-07-14 12:38:07
  • Multiple Updates
2025-06-26 02:37:59
  • Multiple Updates
2025-06-25 12:36:10
  • Multiple Updates
2025-06-24 02:42:38
  • Multiple Updates
2025-05-27 02:47:45
  • Multiple Updates
2025-03-29 03:43:55
  • Multiple Updates
2025-03-28 13:47:21
  • Multiple Updates
2025-03-28 03:21:42
  • Multiple Updates
2025-03-19 03:16:41
  • Multiple Updates
2025-03-18 03:29:40
  • Multiple Updates
2025-03-14 03:16:49
  • Multiple Updates
2025-03-06 14:13:22
  • Multiple Updates
2025-02-22 03:26:54
  • Multiple Updates
2025-01-08 00:20:58
  • Multiple Updates
2025-01-07 21:20:34
  • Multiple Updates
2024-12-27 17:20:28
  • First insertion