CVE-2024-46721

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix possible NULL pointer dereference

profile->parent->dents[AAFS_PROF_DIR] could be NULL only if its parent is made

from __create_missing_ancestors(..) and 'ent->old' is NULL in

aa_replace_profiles(..).

In that case, it must return an error code and the code, -ENOENT represents

its state that the path of its parent is not existed yet.

BUG: kernel NULL pointer dereference, address: 0000000000000030

PGD 0 P4D 0

PREEMPT SMP PTI

CPU: 4 PID: 3362 Comm: apparmor_parser Not tainted 6.8.0-24-generic #24

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014

RIP: 0010:aafs_create.constprop.0+0x7f/0x130

Code: 4c 63 e0 48 83 c4 18 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 c3 cc cc cc cc <4d> 8b 55 30 4d 8d ba a0 00 00 00 4c 89 55 c0 4c 89 ff e8 7a 6a ae

RSP: 0018:ffffc9000b2c7c98 EFLAGS: 00010246

RAX: 0000000000000000 RBX: 00000000000041ed RCX: 00

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References