01 Record

CVE-2024-48881

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.25% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 16.6% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-11 12:25Z1 YR AGO

Last updated

2026-05-23 15:53Z3 MO AGO

Reserved

2025-01-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

1d8658484861051e6d7c6dfe0158e7973e8053f690e387c7e1d9450421ac46d7

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0729029e647234fa1a94376b6edffec5c2cd75f6 to < 4379c5828492a4c2a651c8f826a01453bd2b80b0, db9439cef0b5efccf8021fe89f4953e0f901e85b to < 336e30f32ae7c043fde0f6fa21586ff30bea9fe2, 991e9c186a8ac6ab272a86e0ddc6f9733c38b867 to < fb5fee35bdd18316a84b5f30881a24e1415e1464, 68118c339c6e1e16ae017bef160dbe28a27ae9c8 to < 5202391970ffbf81975251b3526b890ba027b715, 028ddcac477b691dd9205c92f991cc15259d033e to < cc05aa2c0117e20fa25a3c0d915f98b8f2e78667, 028ddcac477b691dd9205c92f991cc15259d033e to < 5e0e913624bcd24f3de414475018d3023f060ee1, 028ddcac477b691dd9205c92f991cc15259d033e to < b2e382ae12a63560fca35050498e19e760adf8c0, fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8, 0cabf9e164660e8d66c4810396046383a1110a69, 5.4.251 to < 5.4.287, 5.10.188 to < 5.10.231, 5.15.121 to < 5.15.174, 6.1.39 to < 6.1.120, 4.19.291 to < 4.20, 6.4.4 to < 6.5, 6.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/4379c5828492a4c2a651c8f826a01453bd2b80b0
git.kernel.orghttps://git.kernel.org/stable/c/336e30f32ae7c043fde0f6fa21586ff30bea9fe2
git.kernel.orghttps://git.kernel.org/stable/c/fb5fee35bdd18316a84b5f30881a24e1415e1464
git.kernel.orghttps://git.kernel.org/stable/c/5202391970ffbf81975251b3526b890ba027b715
git.kernel.orghttps://git.kernel.org/stable/c/cc05aa2c0117e20fa25a3c0d915f98b8f2e78667
git.kernel.orghttps://git.kernel.org/stable/c/5e0e913624bcd24f3de414475018d3023f060ee1
git.kernel.orghttps://git.kernel.org/stable/c/b2e382ae12a63560fca35050498e19e760adf8c0
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

01 Record index

CVE-2024-48881

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-48881

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References