What’s Vulnerable › Vulnerabilities

CVE-2024-43857: f2fs: fix null reference error when checking end of zone

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-17 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null reference error when checking end of zone This patch fixes a potentially null pointer being accessed by is_end_zone_blkaddr() that checks the last block of a zone when f2fs is mounted as a single device.

Affected products

• Linux kernel: from 6.5 before 6.10.3 — fixed in 6.10.3

How to fix

Upgrade to a fixed version: Linux kernel 6.10.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/381cbe85592c78fbaeb3e770e3e9f3bfa3e67efb
• https://git.kernel.org/stable/c/b98777309756ebe15cc9ad4e8ab64bbfaf878a3f
• https://git.kernel.org/stable/c/c82bc1ab2a8a5e73d9728e80c4c2ed87e8921a38

Get alerted when CVE-2024-43857 or the next vulnerability affects your stack