create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

Timeline

Detection, updates, and resolution for this record.

1. Feb 12, 2024 · NIST NVD

   Detected

   create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

2. Oct 15, 2026 · NIST NVD

   Updated

   create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

Affected

• cpe linux/linux kernelversion unspecified

Sources

• CVE.orgCVE-2024-25739

  Official CVE identifier

  cve.org
• NIST NVDCVE-2024-25739

  create_empty_lvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi->leb_size.

  nvd.nist.gov

References

• Reference · git.kernel.org
• Third Party Advisory · groups.google.com
• Reference · lists.debian.org
• Reference · lists.debian.org
• Reference · web.git.kernel.org
• Mailing List · spinics.net