CVE-2024-42306

CVE-2024-42306

High · published August 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

udf: Avoid using corrupted block bitmap buffer

When the filesystem block bitmap is corrupted, we detect the corruption

while loading the bitmap and fail the allocation with error. However the

next allocation from the same bitmap will notice the bitmap buffer is

already loaded and tries to allocate from the bitmap with mixed results

(depending on the exact nature of the bitmap corruption). Fix the

problem by using BH_verified bit to indicate whether the bitmap is valid

or not.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00246 · 14.9th percentile
Published
2024-08-17T13:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 4.14.326, < 4.154.15
linux/linux_kernel≥ 4.19.295, < 4.204.20
linux/linux_kernel≥ 5.4.257, < 5.4.2825.4.282
linux/linux_kernel≥ 5.10.195, < 5.10.2245.10.224
linux/linux_kernel≥ 5.15.132, < 5.15.1655.15.165
linux/linux_kernel≥ 6.1.53, < 6.1.1036.1.103
linux/linux_kernel≥ 6.3, < 6.6.446.6.44
linux/linux_kernel≥ 6.7, < 6.10.36.10.3
References (10)
EPSS history
Timeline
  • 17 AUG 09:09Z
    udf: Avoid using corrupted block bitmap buffer
    cvelistv5