CVE-2024-42296

CVE-2024-42296

High · published August 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix return value of f2fs_convert_inline_inode()

If device is readonly, make f2fs_convert_inline_inode()

return EROFS instead of zero, otherwise it may trigger

panic during writeback of inline inode's dirty page as

below:

f2fs_write_single_data_page+0xbb6/0x1e90 fs/f2fs/data.c:2888

f2fs_write_cache_pages fs/f2fs/data.c:3187 [inline]

__f2fs_write_data_pages fs/f2fs/data.c:3342 [inline]

f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3369

do_writepages+0x359/0x870 mm/page-writeback.c:2634

filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:397

__filemap_fdatawrite_range mm/filemap.c:430 [inline]

file_write_and_wait_range+0x1aa/0x290 mm/filemap.c:788

f2fs_do_sync_file+0x68a/0x1ae0 fs/f2fs/file.c:276

generic_write_sync include/linux/fs.h:2806 [inline]

f2fs_file_write_iter+0x7bd/0x24e0 fs/f2fs/file.c:4977

call_write_iter include/linux/fs.h:2114 [inline]

new_sync_write fs/read_write.c:497 [inline]

vfs_write+0xa72/0xc90 fs/read_write.c:590

ksys_write+0x1a0/0x2c0 fs/read_write.c:643

do_syscall_x64 arch/x86/entry/common.c:52 [inline]

do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83

entry_SYSCALL_64_after_hwframe+0x77/0x7f

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Published
2024-08-17T13:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 3.8, < 5.15.1655.15.165
linux/linux_kernel≥ 5.16, < 6.1.1036.1.103
linux/linux_kernel≥ 6.2, < 6.6.446.6.44
linux/linux_kernel≥ 6.7, < 6.10.36.10.3
References (6)
EPSS history
Timeline
  • 17 AUG 09:09Z
    f2fs: fix return value of f2fs_convert_inline_inode()
    cvelistv5