CVE-2024-53235 erofs: fix file-backed mounts over FUSE
A null pointer dereference in the Linux kernel EROFS filesystem allows local attackers to cause a denial of service when mounting file-backed images over FUSE.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53235?
CVE-2024-53235 is a medium-severity vulnerability in Linux kernel, published on 27 Dec 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix file-backed mounts over FUSE
syzbot reported a null-ptr-deref in fuse_read_args_fill: fuse_read_folio+0xb0/0x100 fs/fuse/file.c:905 filemap_read_folio+0xc6/0x2a0 mm/filemap.c:2367 do_read_cache_folio+0x263/0x5c0 mm/filemap.c:3825 read_mapping_folio include/linux/pagemap.h:1011 [inline] erofs_bread+0x34d/0x7e0 fs/erofs/data.c:41 erofs_read_superblock fs/erofs/super.c:281 [inline] erofs_fc_fill_super+0x2b9/0x2500 fs/erofs/super.c:625
Unlike most filesystems, some network filesystems and FUSE need unavoidable valid `file` pointers for their read I/Os [1]. Anyway, those use cases need to be supported too.
[1] https://docs.kernel.org/filesystems/vfs.html
Weakness: CWE-476
Which versions are affected by CVE-2024-53235?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53235?
Apply the vendor's patch.
Is CVE-2024-53235 being exploited?
There is no known exploitation of CVE-2024-53235 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-53235, DEBIAN-CVE-2024-53235, GHSA-rf84-f276-hxmw, UBUNTU-CVE-2024-53235.