CVE-2024-45026CWE-787

CVE-2024-45026

High · published September 11, 2024

CVSS v3.1
7.0
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: fix error recovery leading to data corruption on ESE devices

Extent Space Efficient (ESE) or thin provisioned volumes need to be

formatted on demand during usual IO processing.

The dasd_ese_needs_format function checks for error codes that signal

the non existence of a proper track format.

The check for incorrect length is to imprecise since other error cases

leading to transport of insufficient data also have this flag set.

This might lead to data corruption in certain error cases for example

during a storage server warmstart.

Fix by removing the check for incorrect length and replacing by

explicitly checking for invalid track format in transport mode.

Also remove the check for file protected since this is not a valid

ESE handling case.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-09-11T20:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 5.3, < 5.4.2835.4.283
linux/linux_kernel≥ 5.5, < 5.10.2255.10.225
linux/linux_kernel≥ 5.11, < 5.15.1665.15.166
linux/linux_kernel≥ 5.16, < 6.1.1076.1.107
linux/linux_kernel≥ 6.2, < 6.6.486.6.48
linux/linux_kernel≥ 6.7, < 6.10.76.10.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
EPSS history
Timeline
  • 11 SEP 15:13Z
    s390/dasd: fix error recovery leading to data corruption on ESE devices
    cvelistv5