CVE-2024-42079: Linux kernel · gfs2: Fix NULL pointer dereference in gfs2_log_flush
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 10 Nov 2026, 14:50 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 29 Jul 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
AI-suggested
Apply the official Linux kernel patch that sets sdp->sd_jdesc to NULL under the log flush lock and adds a NULL check in gfs2_log_flush. Since this is a kernel vulnerability, updating to a fixed kernel version is the recommended remediation.
Description
A NULL pointer dereference vulnerability in the gfs2_log_flush function of the Linux kernel has been fixed. The issue arises due to a race condition between outstanding glock work and an unmount operation, which can lead to dereferencing a NULL pointer. The fix involves setting sdp->sd_jdesc to NULL under the log flush lock and checking its value before dereferencing.
References
- git.kernel.org/stable/c/c3c5cfa3170c0940bc66a142859caac07d19b9d6 (opens in a new tab)
- git.kernel.org/stable/c/5f6a84cfb33b34610623857bd93919dcb661e29b (opens in a new tab)
- git.kernel.org/stable/c/3429ef5f50909cee9e498c50f0c499b9397116ce (opens in a new tab)
- git.kernel.org/stable/c/f54f9d5368a4e92ede7dd078a62788dae3a7c6ef (opens in a new tab)
- git.kernel.org/stable/c/35264909e9d1973ab9aaa2a1b07cda70f12bb828 (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-457936.html (opens in a new tab)