CVE-2024-47705 – This CVE describes a NULL pointer dereference v... (How to Fix)

Q: What is the severity of CVE-2024-47705?

CVE-2024-47705 has a CVSS score of 5.5 (MEDIUM). This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's block subsystem. If exploited, it could cause a kernel panic leading to denial of service. The vulnerability affects Linux systems with block device partitioning functionality.

📋 TL;DR

This CVE describes a NULL pointer dereference vulnerability in the Linux kernel's block subsystem. If exploited, it could cause a kernel panic leading to denial of service. The vulnerability affects Linux systems with block device partitioning functionality.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not specified in CVE description, but references indicate multiple stable kernel versions

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Vulnerability is in core kernel code, so all Linux systems with block device support are potentially affected when the vulnerable code path is executed.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash and denial of service, potentially requiring physical access to restart affected systems.

🟠

Likely Case

System instability or crash when specific block device operations are performed, resulting in temporary denial of service.

🟢

If Mitigated

No impact if the vulnerable code path is not triggered during normal operations.

🌐 Internet-Facing: LOW - This vulnerability requires local access or specific block device operations to trigger.

🏢 Internal Only: MEDIUM - Local users or processes with appropriate permissions could potentially trigger the vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires triggering specific error conditions in block device partitioning operations, which may require local access and specific permissions.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Multiple stable kernel versions referenced in git commits

Vendor Advisory: https://git.kernel.org/stable/c/26e197b7f9240a4ac301dd0ad520c0c697c2ea7d

Restart Required: Yes

Instructions:

1. Update to a patched Linux kernel version from your distribution's repositories. 2. Reboot the system to load the new kernel. 3. Verify the kernel version after reboot.

🔧 Temporary Workarounds

Restrict block device operations

linux

Limit access to block device management operations to trusted users only

Use appropriate file permissions and access controls on /dev/block devices

🧯 If You Can't Patch

Implement strict access controls to prevent unauthorized users from performing block device operations
Monitor system logs for kernel panic events and implement automated alerting

🔍 How to Verify

Check if Vulnerable:

Check kernel version against patched versions in distribution advisories

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version matches or exceeds patched version after update

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages in /var/log/messages or dmesg output
NULL pointer dereference errors in kernel logs

Network Indicators:

None - this is a local vulnerability

SIEM Query:

Search for 'kernel panic' or 'NULL pointer dereference' in system logs

📊 Metadata

CVE ID: CVE-2024-47705

CVSS v3 Score: 5.5 (MEDIUM)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-476

Published: October 21, 2024

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-47705, you might also want to check these: