In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c->zroot.znode = NULL, then dumping tnc tree will access c->zroot.znode which cause null pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/1787cd67bb94b106555ffe64f887f6aa24b47010 cve-icon cve-icon
https://git.kernel.org/stable/c/2a987950df825d0144370e700dc5fb337684ffba cve-icon cve-icon
https://git.kernel.org/stable/c/40e25a3c0063935763717877bb2a814c081509ff cve-icon cve-icon
https://git.kernel.org/stable/c/428aff8f7cfb0d9a8854477648022cef96bcab28 cve-icon cve-icon
https://git.kernel.org/stable/c/6211c11fc20424bbc6d79c835c7c212b553ae898 cve-icon cve-icon
https://git.kernel.org/stable/c/77e5266e3d3faa6bdcf20d9c68a8972f6aa06522 cve-icon cve-icon
https://git.kernel.org/stable/c/bdb0ca39e0acccf6771db49c3f94ed787d05f2d7 cve-icon cve-icon
https://git.kernel.org/stable/c/e01b55f261ccc96e347eba4931e4429d080d879d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025030607-CVE-2024-58058-31d9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-58058 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-58058 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 03 Apr 2025 03:00:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Low

 threat_severity

Moderate

Tue, 25 Mar 2025 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 13 Mar 2025 12:30:00 +0000

Type Values Removed Values Added
References

Fri, 07 Mar 2025 02:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Thu, 06 Mar 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot is null Clearing slab cache will free all znode in memory and make c->zroot.znode = NULL, then dumping tnc tree will access c->zroot.znode which cause null pointer dereference.
Title ubifs: skip dumping tnc tree when zroot is null
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-03-06T15:54:01.033Z

Updated: 2025-10-01T19:36:37.904Z

Reserved: 2025-03-06T15:52:09.179Z

Link: CVE-2024-58058

cve-icon Vulnrichment

Updated: 2025-10-01T16:57:04.758Z

cve-icon NVD

Status : Modified

Published: 2025-03-06T16:15:52.037

Modified: 2025-10-01T20:18:10.880

Link: CVE-2024-58058

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-03-06T00:00:00Z

Links: CVE-2024-58058 - Bugzilla