fs/buffer: add alert in try_to_free_buffers() for folios without buffers (Linux Linux)

CVE-2025-71295
MEDIUM 5.5

En bref

Source
NVD
EPSS
EPSS 0.12 % · centile 2 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Analyzed

Description

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: add alert in try_to_free_buffers() for folios without buffers try_to_free_buffers() can be called on folios with no buffers attached when filemap_release_folio() is invoked on a folio belonging to a mapping with AS_RELEASE_ALWAYS set but no release_folio operation defined. In such cases, folio_needs_release() returns true because of the AS_RELEASE_ALWAYS flag, but the folio has no private buffer data. This causes try_to_free_buffers() to call drop_buffers() on a folio with no buffers, leading to a null pointer dereference. Adding a check in try_to_free_buffers() to return early if the folio has no buffers attached, with WARN_ON_ONCE() to alert about the misconfiguration. This provides defensive hardening.

Faiblesses (CWE)

  • CWE-476 — Déréférencement de pointeur nul

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected d0eafc763135508be118dac208887a26c0adb74d < 1b111a69a6e33a922622bf9870e4e63fb2b649c8 ; affected b4fa966f03b7401ceacd4ffd7227197afb2b8376 < c1b6227555c52781178132b7a06466711855795c ; affected b4fa966f03b7401ceacd4ffd7227197afb2b8376 < 727e5140e0cf83b4ce6a11b89bb73bff5d96f8f3 ; affected b4fa966f03b7401ceacd4ffd7227197afb2b8376 < 42c32d7571ccd8ef32351cac506f00b0fae99fd2 ; affected b4fa966f03b7401ceacd4ffd7227197afb2b8376 < c6246ca15999053d2632fbcc7b86e6eef7f077cb ; affected b4fa966f03b7401ceacd4ffd7227197afb2b8376 < b68f91ef3b3fe82ad78c417de71b675699a8467c
Linux · Linuxaffected 6.6 ; unaffected 0 < 6.6 ; unaffected 6.1.165 ≤ 6.1.* ; unaffected 6.6.128 ≤ 6.6.* ; unaffected 6.12.75 ≤ 6.12.* ; unaffected 6.18.16 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD