Threats tagged 'ghsa-fxx9-q7vv-g6p2'

CVE-2024-41077 addresses a vulnerability in the Linux kernel's null_blk module where the validation of block size was insufficient. The block size must be between 512 bytes and PAGE_SIZE and a power of 2, but the previous check did not enforce this properly. This flaw could cause a kernel Oops due to a null pointer dereference when an invalid block size such as 1536 was used. The issue has been fixed by updating the validation logic.