{"id":"CVE-2024-49957","summary":"ocfs2: fix null-ptr-deref when journal load failed.","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix null-ptr-deref when journal load failed.\n\nDuring the mounting process, if journal_reset() fails because of too short\njournal, then lead to jbd2_journal_load() fails with NULL j_sb_buffer. \nSubsequently, ocfs2_journal_shutdown() calls\njbd2_journal_flush()-\u003ejbd2_cleanup_journal_tail()-\u003e\n__jbd2_update_log_tail()-\u003ejbd2_journal_update_sb_log_tail()\n-\u003elock_buffer(journal-\u003ej_sb_buffer), resulting in a null-pointer\ndereference error.\n\nTo resolve this issue, we should check the JBD2_LOADED flag to ensure the\njournal was properly loaded.  Additionally, use journal instead of\nosb-\u003ejournal directly to simplify the code.","modified":"2026-04-02T12:21:10.280926Z","published":"2024-10-21T18:02:11.046Z","related":["MGASA-2024-0344","MGASA-2024-0345","SUSE-SU-2024:3984-1","SUSE-SU-2024:3986-1","SUSE-SU-2024:4100-1","SUSE-SU-2024:4315-1","SUSE-SU-2024:4318-1","SUSE-SU-2024:4364-1","SUSE-SU-2024:4376-1","SUSE-SU-2024:4387-1","SUSE-SU-2025:0034-1","SUSE-SU-2025:20163-1","SUSE-SU-2025:20164-1","SUSE-SU-2025:20246-1","SUSE-SU-2025:20247-1","USN-7276-1","USN-7277-1","openSUSE-SU-2024:14500-1","openSUSE-SU-2025:14705-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49957.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/387bf565cc03e2e8c720b8b4798efea4aacb6962"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5784d9fcfd43bd853654bb80c87ef293b9e8e80a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/703b2c7e0798d263154dc8593dc2345f75dc077f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/82dfdd1e31e774578f76ce6dc90c834f96403a0f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/86a89e75e9e4dfa768b97db466ad6bedf2e7ea5b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bf605ae98dab5c15c5b631d4d7f88898cb41b649"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f60e94a83db799bde625ac8671a5b4a6354e7120"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fd89d92c1140cee8f59de336cb37fa65e359c123"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ff55291fb36779819211b596da703389135f5b05"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/49xxx/CVE-2024-49957.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-49957"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f6f50e28f0cb8d7bcdfaacc83129f005dede11b1"},{"fixed":"fd89d92c1140cee8f59de336cb37fa65e359c123"},{"fixed":"703b2c7e0798d263154dc8593dc2345f75dc077f"},{"fixed":"bf605ae98dab5c15c5b631d4d7f88898cb41b649"},{"fixed":"ff55291fb36779819211b596da703389135f5b05"},{"fixed":"82dfdd1e31e774578f76ce6dc90c834f96403a0f"},{"fixed":"86a89e75e9e4dfa768b97db466ad6bedf2e7ea5b"},{"fixed":"f60e94a83db799bde625ac8671a5b4a6354e7120"},{"fixed":"387bf565cc03e2e8c720b8b4798efea4aacb6962"},{"fixed":"5784d9fcfd43bd853654bb80c87ef293b9e8e80a"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-49957.json"}}],"schema_version":"1.7.5"}