CVE-2024-47705

What it actually does

The vulnerability is a potential invalid pointer dereference in blk_add_partition due to incomplete error handling that allows md_autodetect_dev to be invoked on an unvalidated part pointer after an -ENXIO error path.

Why it matters to the business

System instability or crashes on Linux hosts that could disrupt operations across environments with 99 downstream dependents, requiring urgent patching despite low exploit probability.

How an attack unfolds

A local attacker supplies partition data that triggers the -ENXIO error path in blk_add_partition, bypassing pointer validation and leading to dereference of an invalid pointer when md_autodetect_dev runs; threat actors in 2024 zero-day and Linux kernel campaigns have targeted similar kernel memory issues.

How to fix it

Upgrade the Linux kernel to commit 4bc4272e2506941c3f3d4fb8b0c659ee814dcf6f or later; apply django 5.0.8 where applicable in dependent packages.

How to confirm the fix worked

Inspect kernel source for split error checks separating general IS_ERR(part) from the -ENXIO case and confirm md_autodetect_dev is only reached with validated pointers; test partition addition under error conditions.

Typical attack path

1. Gain local access on a vulnerable Linux system
2. Trigger blk_add_partition with conditions that produce an -ENXIO error
3. Force execution of md_autodetect_dev without a valid part pointer
4. Trigger invalid pointer dereference resulting in kernel panic or corruption

How to detect it

Search kernel logs and dmesg for oops/panic entries referencing blk_add_partition or invalid pointer dereferences near md_autodetect_dev; correlate with local process activity on block devices.

What your security team should do

• Apply kernel fixes immediately on all affected systems given 721 days since publication and ecosystem reach
• Restrict local unprivileged access to block devices until patched
• Review logs for partition-related kernel faults
• Monitor EPSS and threat actor activity for similar Linux kernel memory issues