A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.
Fix
Patch, vendor advisory and mitigation references on NVD 8
- https://access.redhat.com/errata/RHSA-2024:2394 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:2950 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:3138 Vendor Advisory
- https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a Patch
- https://access.redhat.com/errata/RHSA-2024:2394 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:2950 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:3138 Vendor Advisory
- https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · debian, redhat, linuxNVD modified 2026-10-23 14:20
Affected (CPE criteria) 75
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_els:8.10:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:x86:*cpe:2.3:o:redhat:enterprise_linux_for_els:8.10:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux_for_els:8.10:*:*:*:*:*:x64:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:8.10:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:*cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:arm64:*cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:x64:*cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:arm64:*cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:x64:*cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.8:*:*:*:*:*:arm64:*cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.8:*:*:*:*:*:x64:*cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.8_s390x:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.8_ppc64le:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x86:*cpe:2.3:o:redhat:enterprise_linux:9.4:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux:9.6:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux:9.8:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:arm64:*cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:*:*- and 35 more
References 13
- https://access.redhat.com/errata/RHSA-2024:2394 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:2950 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:3138 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-6915 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2254982 Issue Tracking
- https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a Patch
- https://access.redhat.com/errata/RHSA-2024:2394 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:2950 Vendor Advisory
- https://access.redhat.com/errata/RHSA-2024:3138 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-6915 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2254982 Issue Tracking
- https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html Mailing List, Third Party Advisory