Medium 4.7Published Apr 17, 2024

CVE-2024-26878quota: Fix potential NULL pointer dereference

Updated under an hour ago (Oct 27, 2026, 10:30 PM ET)

Does this affect you?

It affects Linux and 6 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: quota: Fix potential NULL pointer dereference Below race may cause NULL pointer dereference P1 P2 dquot_free_inode quota_off drop_dquot_ref remove_dquot_ref dquots = i_dquot(inode) dquots = i_dquot(inode) srcu_read_lock dquots[cnt]) != NULL (1) dquots[type] = NULL (2) spin_lock(&dquots[cnt]->dq_dqb_lock) (3) .... If dquot_free_inode(or other routines) checks inode's quota pointers (1) before quota_off sets it to NULL(2) and use it (3) after that, NULL pointer dereference will be triggered. So let's fix it by using a temporary pointer to avoid this issue.

CVSS: 4.7 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac before 8514899c1a4edf802f03c408db901063aa3f05a1; from 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac before 49669f8e7eb053f91d239df7b1bfb4500255a9d0; from 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac before 61380537aa6dd32d8a723d98b8f1bd1b11d8fee0; 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac builds before 1ca72a3de915f87232c9a4cb9bebbd3af8ed3e25; from 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac before 7f9e833fc0f9b47be503af012eb5903086939754; from 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac before 40a673b4b07efd6f74ff3ab60f38b26aa91ee5d5; from 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac before f2649d98aa9ca8623149b3cb8df00c944f5655c7; 7b9ca4c61bc278b771fb57d6290a31ab1fc7fdac builds before 6afc9f4434fa8063aa768c2bf5bf98583aee0877; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.0 before V3.1.5	CISA ADP
linux linux_kernel linux:linux_kernel	before 4.19.311; from 4.20 before 5.4.273; from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/8514899c1a4edf802f03c408db901063aa3f05a1	patch
https://git.kernel.org/stable/c/49669f8e7eb053f91d239df7b1bfb4500255a9d0	patch
https://git.kernel.org/stable/c/61380537aa6dd32d8a723d98b8f1bd1b11d8fee0	patch
https://git.kernel.org/stable/c/1ca72a3de915f87232c9a4cb9bebbd3af8ed3e25	patch
https://git.kernel.org/stable/c/7f9e833fc0f9b47be503af012eb5903086939754	patch
https://git.kernel.org/stable/c/40a673b4b07efd6f74ff3ab60f38b26aa91ee5d5	patch
https://git.kernel.org/stable/c/f2649d98aa9ca8623149b3cb8df00c944f5655c7	patch
https://git.kernel.org/stable/c/6afc9f4434fa8063aa768c2bf5bf98583aee0877	patch
https://git.kernel.org/stable/c/d0aa72604fbd80c8aabb46eda00535ed35570f1f	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	mailing-list
1–10 of 13

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.