Log in Start free

Vulnerability · Published Feb 24, 2024 · Assigned by Linux

CVE-2024-26601ext4: regenerate buddy after block freeing failed if under fc replay

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 78.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ext4: regenerate buddy after block freeing failed if under fc replay This mostly reverts commit 6bd97bf273bd ("ext4: remove redundant mb_regenerate_buddy()") and reintroduces mb_regenerate_buddy(). Based on code in mb_free_blocks(), fast commit replay can end up marking as free blocks that are already marked as such. This causes corruption of the buddy bitmap so we need to regenerate it in that case.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.82-1DEBIAN-CVE-2024-26601
Debian:13linux6.7.7-1DEBIAN-CVE-2024-26601
Debian:14linux6.7.7-1DEBIAN-CVE-2024-26601
Ubuntu:22.04:LTSlinux5.15.0-112.122USN-6820-1
Ubuntu:22.04:LTSlinux5.15.0-112.122UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-aws5.15.0-1063.69UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-aws5.15.0-1063.69USN-6821-3
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1023.23~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1023.23~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-azure5.15.0-1066.75UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-azure5.15.0-1066.75USN-6821-4
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1024.25~22.04.1USN-6895-2
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1024.25~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1067.76.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1065.74.1USN-6821-4
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-gcp5.15.0-1062.70USN-6820-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1062.70UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1024.26~22.04.1USN-6895-2
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1024.26~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-gke5.15.0-1060.66UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-gke5.15.0-1060.66USN-6821-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1046.53USN-6821-2
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1046.53UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-44.44~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-44.44~22.04.1USN-6900-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1056.59UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-ibm5.15.0-1056.59USN-6821-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1058.64USN-6821-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1058.64UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-kvm5.15.0-1060.65USN-6821-2
Ubuntu:22.04:LTSlinux-kvm5.15.0-1060.65UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-110.120UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-110.120USN-6820-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-44.44.1~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-44.44.1~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1058.59USN-6820-2
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1058.59UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1023.24UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1023.24USN-6895-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1027.28USN-6895-4
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1027.28UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oracle5.15.0-1061.67USN-6821-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1061.67UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1026.26~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1026.26~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-raspi5.15.0-1058.61UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-raspi5.15.0-1058.61USN-6919-1
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1017.18~22.04.1USN-6895-3
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1017.18~22.04.1UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2024-26601
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34USN-6820-1

Affected products (as reported)

VendorProductVersions
Linux Linux 0983142c5f17a62055ec851372273c3bc77e4788 – before 94ebf71bddbcd4ab1ce43ae32c6cb66396d2d51a6bd97bf273bdb4944904e57480f6545bca48ad77 – before c1317822e2de80e78f137d3a2d99febab1b803266bd97bf273bdb4944904e57480f6545bca48ad77 – before 78327acd4cdc4a1601af718b781eece577b6b7d46bd97bf273bdb4944904e57480f6545bca48ad77 – before ea42d6cffb0dd27a417f410b9d0011e9859328cb6bd97bf273bdb4944904e57480f6545bca48ad77 – before 6b0d48647935e4b8c7b75d1eccb9043fcd4ee5816bd97bf273bdb4944904e57480f6545bca48ad77 – before c9b528c35795b711331ed36dc3dbee90d5812d4e5.10.181 – before 5.10.211
Linux Linux 5.11

References