CVE-2024-26601

CVE-2024-26601

High · published February 26, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: regenerate buddy after block freeing failed if under fc replay

This mostly reverts commit 6bd97bf273bd ("ext4: remove redundant

mb_regenerate_buddy()") and reintroduces mb_regenerate_buddy(). Based on

code in mb_free_blocks(), fast commit replay can end up marking as free

blocks that are already marked as such. This causes corruption of the

buddy bitmap so we need to regenerate it in that case.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.6th percentile
Published
2024-02-26T21:27Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel< 5.10.2115.10.211
linux/linux_kernel≥ 5.11.0, < 5.15.1505.15.150
linux/linux_kernel≥ 5.16.0, < 6.1.786.1.78
linux/linux_kernel≥ 6.2.0, < 6.6.176.6.17
linux/linux_kernel≥ 6.7.0, < 6.7.56.7.5
References (13)
EPSS history
Timeline
  • 24 FEB 14:56Z
    ext4: regenerate buddy after block freeing failed if under fc replay
    cvelistv5