Log in Start free

Vulnerability · Published Aug 17, 2024 · Assigned by Linux

CVE-2024-42273f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 86.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid mkdir /mnt/test/comp f2fs_io setflags compression /mnt/test/comp dd if=/dev/zero of=/mnt/test/comp/testfile bs=16k count=1 truncate --size 13 /mnt/test/comp/testfile In the above scenario, we can get a BUG_ON. kernel BUG at fs/f2fs/segment.c:3589! Call Trace: do_write_page+0x78/0x390 [f2fs] f2fs_outplace_write_data+0x62/0xb0 [f2fs] f2fs_do_write_data_page+0x275/0x740 [f2fs] f2fs_write_single_data_page+0x1dc/0x8f0 [f2fs] f2fs_write_multi_pages+0x1e5/0xae0 [f2fs] f2fs_write_cache_pages+0xab1/0xc60 [f2fs] f2fs_write_data_pages+0x2d8/0x330 [f2fs] do_writepages+0xcf/0x270 __writeback_single_inode+0x44/0x350 writeback_sb_inodes+0x242/0x530 __writeback_inodes_wb+0x54/0xf0 wb_writeback+0x192/0x310 wb_workfn+0x30d/0x400 The reason is we gave CURSEG_ALL_DATA_ATGC to COMPR_ADDR where the page was set the gcing flag by set_cluster_dirty().

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.106-1DEBIAN-CVE-2024-42273
Debian:13linux6.10.4-1DEBIAN-CVE-2024-42273
Debian:14linux6.10.4-1DEBIAN-CVE-2024-42273
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux6.8.0-50.51UBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux6.8.0-50.51USN-7154-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-aws6.8.0-1020.22USN-7154-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1020.22UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1020.22~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1020.22~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-azure6.8.0-1020.23USN-7196-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1020.23UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1020.23~22.04.1USN-7196-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1020.23~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-gcp6.8.0-1019.21USN-7154-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1019.21UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1019.21~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1019.21~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-gke6.8.0-1015.19USN-7154-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1015.19UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-50.51~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-50.51~22.04.1USN-7154-2
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-ibm6.8.0-1017.17USN-7154-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1017.17UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1017.17~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-50.51.1UBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-50.51.1USN-7154-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-50.51.1~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-50.51.1~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1019.21UBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1019.21USN-7155-1
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1019.21~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1019.21~22.04.1USN-7155-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1019.21.1UBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1019.21.1USN-7155-1
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1018.18USN-7154-1
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1018.18UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-oracle6.8.0-1017.18USN-7154-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1017.18UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1017.18~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1017.18~22.04.1USN-7154-1
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-raspi6.8.0-1016.18UBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-raspi6.8.0-1016.18USN-7154-1
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-riscv6.8.0-50.51.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-50.51.1~22.04.1UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-42273
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2024-42273
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-42273

Affected products (as reported)

VendorProductVersions
Linux Linux 7c972c89457511007dfc933814c06786905e515c – before 5fd057160ab240dd816ae09b625395d54c297de1417b8a91f4e8831cadaf85c3f15c6991c1f54dde – before 4239571c5db46a42f723b8fa8394039187c344394961acdd65c956e97c1a000c82d91a8c1cdbe44b – before 0cd106612396656d6f1ca17ef192c6759bb607914961acdd65c956e97c1a000c82d91a8c1cdbe44b – before 8cb1f4080dd91c6e6b01dbea013a3f42341cb6a17ea0f29d9fd84905051be020c0df7d557e286136b8094c0f1aae329b1c60a275a780d6c2c9ff7aa36.1.77 – before 6.1.1046.6.16 – before 6.6.45
Linux Linux 6.8

References