udf: Avoid using corrupted block bitmap buffer
In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BH_verified bit to indicate whether the bitmap is valid or not.
CVE-2024-42306
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-42306
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "7648ea9896b31aff38830d81188f5b7a1773e4a8",
"lessThan": "cae9e59cc41683408b70b9ab569f8654866ba914",
"versionType": "git"
},
{
"status": "affected",
"version": "4ac54312f623c6d2ca30c36c1ef530c11f5aff64",
"lessThan": "2199e157a465aaf98294d3932797ecd7fce942d5",
"versionType": "git"
},
{
"status": "affected",
"version": "099bf90d7fc4622da9fd4727f6d318a0f12d10be",
"lessThan": "6a43e3c210df6c5f00570f4be49a897677dbcb64",
"versionType": "git"
},
{
"status": "affected",
"version": "6ac8f2c8362afd2baa8e7b9c946597589e587d22",
"lessThan": "271cab2ca00652bc984e269cf1208699a1e09cdd",
"versionType": "git"
},
{
"status": "affected",
"version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
"lessThan": "57053b3bcf3403b80db6f65aba284d7dfe7326af",
"versionType": "git"
},
{
"status": "affected",
"version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
"lessThan": "8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"versionType": "git"
},
{
"status": "affected",
"version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
"lessThan": "a90d4471146de21745980cba51ce88e7926bcc4f",
"versionType": "git"
},
{
"status": "affected",
"version": "f862a9049c3f6e73a5504a1ac10ffd5bc253ab55",
"versionType": "git"
},
{
"status": "affected",
"version": "4622cc1b6d86013e01c56b60b092b5e4726c8e52",
"versionType": "git"
},
{
"status": "affected",
"version": "5.4.257",
"lessThan": "5.4.282",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.10.195",
"lessThan": "5.10.224",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.132",
"lessThan": "5.15.165",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.53",
"lessThan": "6.1.103",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.14.326",
"lessThan": "4.15",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.19.295",
"lessThan": "4.20",
"versionType": "semver"
}
],
"programFiles": [
"fs/udf/balloc.c",
"fs/udf/super.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.3"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.3",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.4.282",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.224",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.165",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.103",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.44",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.10.3",
"versionType": "semver",
"lessThanOrEqual": "6.10.*"
},
{
"status": "unaffected",
"version": "6.11",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/udf/balloc.c",
"fs/udf/super.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-42306
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #26684 · Revision 1
- Added to Heist Feed
- Publisher date