LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an unsinking of IR_FSTORE for NULL metatable, which leads to Denial of Service (DoS).
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Luajit | Luajit | * | 2.1.0 (including) |
| Luajit | Ubuntu | oracular | * |
| Luajit | Ubuntu | plucky | * |
Potential Mitigations
References
- https://gist.github.com/pwnhacker0x18/a73f560d79f2c3d4011d6c5a2676f04a
- https://github.com/LuaJIT/LuaJIT/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f
- https://github.com/LuaJIT/LuaJIT/issues/1147
- https://github.com/openresty/luajit2/commit/85b4fed0b0353dd78c8c875c2f562d522a2b310f
- https://lists.debian.org/debian-lts-announce/2025/08/msg00022.html
- https://github.com/LuaJIT/LuaJIT/issues/1147