CVE-2024-40951

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() bdev->bd_super has been removed and commit 8887b94d9322 change the usage from bdev->bd_super to b_assoc_map->host->i_sb. Since ocfs2 hasn't set bh->b_assoc_map, it will trigger NULL pointer dereference when calling into ocfs2_abort_trigger(). Actually this was pointed out in history, see commit 74e364ad1b13. But I've made a mistake when reviewing commit 8887b94d9322 and then re-introduce this regression. Since we cannot revive bdev in buffer head, so fix this issue by initializing all types of ocfs2 triggers when fill super, and then get the specific ocfs2 trigger from ocfs2_caching_info when access journal. [joseph.qi@linux.alibaba.com: v2]

• CWE-476

• https://git.kernel.org/stable/c/67bcecd780609f471260a8c83fb0ae15f27734cePatch
• https://git.kernel.org/stable/c/685d03c3795378fca6a1b3d43581f7f1a3fc095fPatch
• https://git.kernel.org/stable/c/eb63357ef229fae061ce7ce2839d558681c42f1aPatch
• https://git.kernel.org/stable/c/67bcecd780609f471260a8c83fb0ae15f27734cePatch
• https://git.kernel.org/stable/c/685d03c3795378fca6a1b3d43581f7f1a3fc095fPatch
• https://git.kernel.org/stable/c/eb63357ef229fae061ce7ce2839d558681c42f1aPatch

Published

Jul 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-40946Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-40947In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-40948In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-40949In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-4095The Collapse-O-Matic plugin for WordPress is vulnerable to S…6.4
• CVE-2024-40950In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-40952In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-40953In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-40954In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-40955In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-40956In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-40957In the Linux kernel, the following vulnerability has been re…5.5