f2fs: remove clear SB_INLINECRYPT flag in default_options
In the Linux kernel, the following vulnerability has been resolved: f2fs: remove clear SB_INLINECRYPT flag in default_options In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set. If create new file or open file during this gap, these files will not use inlinecrypt. Worse case, it may lead to data corruption if wrappedkey_v0 is enable. Thread A: Thread B: -f2fs_remount -f2fs_file_open or f2fs_new_inode -default_options <- clear SB_INLINECRYPT flag -fscrypt_select_encryption_impl -parse_options <- set SB_INLINECRYPT again
CVE-2024-40971
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-40971
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "98e4da8ca301e062d79ae168c67e56f3c3de3ce4",
"lessThan": "38a82c8d00638bb642bef787eb1d5e0e4d3b7d71",
"versionType": "git"
},
{
"status": "affected",
"version": "98e4da8ca301e062d79ae168c67e56f3c3de3ce4",
"lessThan": "724429db09e21ee153fef35e34342279d33df6ae",
"versionType": "git"
},
{
"status": "affected",
"version": "98e4da8ca301e062d79ae168c67e56f3c3de3ce4",
"lessThan": "a9cea0489c562c97cd56bb345e78939f9909e7f4",
"versionType": "git"
},
{
"status": "affected",
"version": "98e4da8ca301e062d79ae168c67e56f3c3de3ce4",
"lessThan": "eddeb8d941d5be11a9da5637dbe81ac37e8449a2",
"versionType": "git"
},
{
"status": "affected",
"version": "98e4da8ca301e062d79ae168c67e56f3c3de3ce4",
"lessThan": "ae39c8ec4250d2a35ddaab1c40faacfec306ff66",
"versionType": "git"
},
{
"status": "affected",
"version": "98e4da8ca301e062d79ae168c67e56f3c3de3ce4",
"lessThan": "ac5eecf481c29942eb9a862e758c0c8b68090c33",
"versionType": "git"
}
],
"programFiles": [
"fs/f2fs/super.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "3.8"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "3.8",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.221",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.162",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.96",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.36",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.9.7",
"versionType": "semver",
"lessThanOrEqual": "6.9.*"
},
{
"status": "unaffected",
"version": "6.10",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/f2fs/super.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-40971
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #26648 · Revision 1
- Added to Heist Feed
- Publisher date