CVE-2024-53167: 
Linux Kernel vulnerability analysis and mitigation

In the Linux kernel, a vulnerability (CVE-2024-53167) was discovered in the NFS blocklayout subsystem. The issue occurs when unmounting a pNFS SCSI layout-enabled NFS, which may lead to a NULL pointer dereference of a block_device. This vulnerability was introduced by commit d869da91cccb ("nfs/blocklayout: Fix premature PR key unregistration") (Kernel Git).

The vulnerability manifests when the system attempts to create an nfs4_deviceid_node but fails to attach the block device to the pnfs_block_dev during device lookup. The issue occurs in the call chain through bl_unregister_scsi, bl_free_device, and related functions, ultimately leading to a NULL pointer dereference during system unmount operations (Kernel Git).

When triggered, this vulnerability can cause a system crash due to the NULL pointer dereference during the unmounting of pNFS SCSI layout-enabled NFS filesystems (Kernel Git).

The issue has been fixed by moving the dereference operation behind a test for the PNFS_BDEV_REGISTERED flag. This ensures that the block device is not accessed unless it was properly registered. The fix has been implemented in the Linux kernel (Kernel Git).