CVE-2024-49859CWE-362

CVE-2024-49859

High · published October 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to check atomic_file in f2fs ioctl interfaces

Some f2fs ioctl interfaces like f2fs_ioc_set_pin_file(),

f2fs_move_file_range(), and f2fs_defragment_range() missed to

check atomic_write status, which may cause potential race issue,

fix it.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2024-10-21T17:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 6.1.1136.1.113
linux/linux_kernel≥ 6.2, < 6.6.546.6.54
linux/linux_kernel≥ 6.7, < 6.10.136.10.13
linux/linux_kernel≥ 6.11, < 6.11.26.11.2
References (6)
EPSS history
Timeline
  • 21 OCT 12:27Z
    f2fs: fix to check atomic_file in f2fs ioctl interfaces
    cvelistv5