UnratedFix available
mm: prevent derefencing NULL ptr in pfn_section_valid()
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.222, 5.15.163, 6.1.100, 6.6.41, 6.9.10
- CVEs
- CVE-2024-41055
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 02:44 UTC · Revision 1
Source evidence
mm: prevent derefencing NULL ptr in pfn_section_valid()
core-osv · Original sourcePublished 29 Jul 2024, 14:32 UTC
In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 ("mm/sparsemem: fix race in accessing memory_section->usage") changed pfn_section_valid() to add a READ_ONCE() call around "ms->usage" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.
osv:CVE-2024-41055
Kernel
Fixed versions: 5.10.222, 5.15.163, 6.1.100, 6.6.41, 6.9.10
Complete source record
{
"id": "611c286c47bb8ec6fb371054275912f9c7c0609ad83258e1a2f8ebbbd0f8dc2d",
"url": "https://osv.dev/vulnerability/CVE-2024-41055",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "mm: prevent derefencing NULL ptr in pfn_section_valid()",
"summary": "In the Linux kernel, the following vulnerability has been resolved: mm: prevent derefencing NULL ptr in pfn_section_valid() Commit 5ec8e8ea8b77 (\"mm/sparsemem: fix race in accessing memory_section->usage\") changed pfn_section_valid() to add a READ_ONCE() call around \"ms->usage\" to fix a race with section_deactivate() where ms->usage can be cleared. The READ_ONCE() call, by itself, is not enough to prevent NULL pointer dereference. We need to check its value before dereferencing it.",
"evidence": "osv:CVE-2024-41055",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.222",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.163",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.100",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.41",
"evidence": "/affected/1/ranges"
},
{
"value": "6.9.10",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2024-41055",
"aliases": [
"CVE-2024-41055"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "90ad17575d26874287271127d43ef3c2af876cea"
},
{
"fixed": "0100aeb8a12d51950418e685f879cc80cb8e5982"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "b448de2459b6d62a53892487ab18b7d823ff0529"
},
{
"fixed": "bc17f2377818dca643a74499c3f5333500c90503"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "68ed9e33324021e9d6b798e9db00ca3093d2012a"
},
{
"fixed": "941e816185661bf2b44b488565d09444ae316509"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "70064241f2229f7ba7b9599a98f68d9142e81a97"
},
{
"fixed": "797323d1cf92d09b7a017cfec576d9babf99cde7"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5ec8e8ea8b7783fab150cf86404fc38cb4db8800"
},
{
"fixed": "adccdf702b4ea913ded5ff512239e382d7473b63"
},
{
"fixed": "82f0b6f041fad768c28b4ad05a683065412c226e"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.10.210"
},
{
"fixed": "5.10.222"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.15.149"
},
{
"fixed": "5.15.163"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.1.76"
},
{
"fixed": "6.1.100"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.6.15"
},
{
"fixed": "6.6.41"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.7.3"
},
{
"fixed": "6.8"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "3a01daace71b521563c38bbbf874e14c3e58adb7"
}
]
}
],
"versions": [
"v5.10.221",
"v5.10.220",
"v5.10.219",
"v5.10.218",
"v5.10.217",
"v5.10.216",
"v5.10.215",
"v5.10.214",
"v5.10.213",
"v5.10.212",
"v5.10.211",
"v5.10.210",
"v5.15.162",
"v5.15.161",
"v5.15.160",
"v5.15.159",
"v5.15.158",
"v5.15.157",
"v5.15.156",
"v5.15.155",
"v5.15.154",
"v5.15.153",
"v5.15.152",
"v5.15.151",
"v5.15.150",
"v5.15.149",
"v6.1.99",
"v6.1.98",
"v6.1.97",
"v6.1.96",
"v6.1.95",
"v6.1.94",
"v6.1.93",
"v6.1.92",
"v6.1.91",
"v6.1.90",
"v6.1.89",
"v6.1.88",
"v6.1.87",
"v6.1.86",
"v6.1.85",
"v6.1.84",
"v6.1.83",
"v6.1.82",
"v6.1.81",
"v6.1.80",
"v6.1.79",
"v6.1.78",
"v6.1.77",
"v6.1.76",
"v6.6.40",
"v6.6.39",
"v6.6.38",
"v6.6.37",
"v6.6.36",
"v6.6.35",
"v6.6.34",
"v6.6.33",
"v6.6.32",
"v6.6.31",
"v6.6.30",
"v6.6.29",
"v6.6.28",
"v6.6.27",
"v6.6.26",
"v6.6.25",
"v6.6.24",
"v6.6.23",
"v6.6.22",
"v6.6.21",
"v6.6.20",
"v6.6.19",
"v6.6.18",
"v6.6.17",
"v6.6.16",
"v6.6.15",
"v6.7.12",
"v6.7.11",
"v6.7.10",
"v6.7.9",
"v6.7.8",
"v6.7.7",
"v6.7.6",
"v6.7.5",
"v6.7.4",
"v6.7.3"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41055.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.10.222"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.163"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.100"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.41"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.9.10"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41055.json"
}
}
],
"modified": "2026-10-28T02:30:32.834262632Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0100aeb8a12d51950418e685f879cc80cb8e5982",
"https://git.kernel.org/stable/c/797323d1cf92d09b7a017cfec576d9babf99cde7",
"https://git.kernel.org/stable/c/82f0b6f041fad768c28b4ad05a683065412c226e",
"https://git.kernel.org/stable/c/941e816185661bf2b44b488565d09444ae316509",
"https://git.kernel.org/stable/c/adccdf702b4ea913ded5ff512239e382d7473b63",
"https://git.kernel.org/stable/c/bc17f2377818dca643a74499c3f5333500c90503",
"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41055.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-41055",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41055.json"
}
},
"related_cves": [
{
"value": "CVE-2024-41055",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 499787,
"published_at": "2024-07-29T14:32:10.672+00:00"
}