cve-2024-42306
Vulnerability from cvelistv5
Published
2024-08-17 09:09
Modified
2024-12-19 09:16
Severity ?
Summary
udf: Avoid using corrupted block bitmap buffer
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914
Impacted products
LinuxLinux
LinuxLinux
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42306",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:10:15.929324Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:27.843Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/udf/balloc.c",
            "fs/udf/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cae9e59cc41683408b70b9ab569f8654866ba914",
              "status": "affected",
              "version": "7648ea9896b31aff38830d81188f5b7a1773e4a8",
              "versionType": "git"
            },
            {
              "lessThan": "2199e157a465aaf98294d3932797ecd7fce942d5",
              "status": "affected",
              "version": "4ac54312f623c6d2ca30c36c1ef530c11f5aff64",
              "versionType": "git"
            },
            {
              "lessThan": "6a43e3c210df6c5f00570f4be49a897677dbcb64",
              "status": "affected",
              "version": "099bf90d7fc4622da9fd4727f6d318a0f12d10be",
              "versionType": "git"
            },
            {
              "lessThan": "271cab2ca00652bc984e269cf1208699a1e09cdd",
              "status": "affected",
              "version": "6ac8f2c8362afd2baa8e7b9c946597589e587d22",
              "versionType": "git"
            },
            {
              "lessThan": "57053b3bcf3403b80db6f65aba284d7dfe7326af",
              "status": "affected",
              "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
              "versionType": "git"
            },
            {
              "lessThan": "8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
              "status": "affected",
              "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
              "versionType": "git"
            },
            {
              "lessThan": "a90d4471146de21745980cba51ce88e7926bcc4f",
              "status": "affected",
              "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/udf/balloc.c",
            "fs/udf/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "lessThan": "6.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Avoid using corrupted block bitmap buffer\n\nWhen the filesystem block bitmap is corrupted, we detect the corruption\nwhile loading the bitmap and fail the allocation with error. However the\nnext allocation from the same bitmap will notice the bitmap buffer is\nalready loaded and tries to allocate from the bitmap with mixed results\n(depending on the exact nature of the bitmap corruption). Fix the\nproblem by using BH_verified bit to indicate whether the bitmap is valid\nor not."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T09:16:04.377Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914"
        },
        {
          "url": "https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64"
        },
        {
          "url": "https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd"
        },
        {
          "url": "https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af"
        },
        {
          "url": "https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65"
        },
        {
          "url": "https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f"
        }
      ],
      "title": "udf: Avoid using corrupted block bitmap buffer",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42306",
    "datePublished": "2024-08-17T09:09:11.938Z",
    "dateReserved": "2024-07-30T07:40:12.273Z",
    "dateUpdated": "2024-12-19T09:16:04.377Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-42306\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-08-17T09:15:10.777\",\"lastModified\":\"2024-08-19T12:59:59.177\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nudf: Avoid using corrupted block bitmap buffer\\n\\nWhen the filesystem block bitmap is corrupted, we detect the corruption\\nwhile loading the bitmap and fail the allocation with error. However the\\nnext allocation from the same bitmap will notice the bitmap buffer is\\nalready loaded and tries to allocate from the bitmap with mixed results\\n(depending on the exact nature of the bitmap corruption). Fix the\\nproblem by using BH_verified bit to indicate whether the bitmap is valid\\nor not.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: udf: evite el uso del b\u00fafer de mapa de bits de bloque da\u00f1ado Cuando el mapa de bits de bloque del sistema de archivos est\u00e1 da\u00f1ado, detectamos la corrupci\u00f3n mientras cargamos el mapa de bits y fallamos la asignaci\u00f3n con error. Sin embargo, la siguiente asignaci\u00f3n del mismo mapa de bits notar\u00e1 que el b\u00fafer de mapa de bits ya est\u00e1 cargado e intentar\u00e1 realizar la asignaci\u00f3n desde el mapa de bits con resultados mixtos (dependiendo de la naturaleza exacta de la corrupci\u00f3n del mapa de bits). Solucione el problema utilizando el bit BH_verified para indicar si el mapa de bits es v\u00e1lido o no.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.