IM
IronMonkey Threat Research

CVE-2024-42306 HIGH

Published: 2024-08-17 | Last Modified: 2026-08-04 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BH_verified bit to indicate whether the bitmap is valid or not.

Additional Descriptions (1)

En el kernel de Linux, se resolvió la siguiente vulnerabilidad: udf: evite el uso del búfer de mapa de bits de bloque dañado Cuando el mapa de bits de bloque del sistema de archivos está dañado, detectamos la corrupción mientras cargamos el mapa de bits y fallamos la asignación con error. Sin embargo, la siguiente asignación del mismo mapa de bits notará que el búfer de mapa de bits ya está cargado e intentará realizar la asignación desde el mapa de bits con resultados mixtos (dependiendo de la naturaleza exacta de la corrupción del mapa de bits). Solucione el problema utilizando el bit BH_verified para indicar si el mapa de bits es válido o no.

CVSS Metrics

Base Score: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd3686c8780> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd368d2c5c0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36a6e6240> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd2dbf6e280> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd39c47bc00> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd39c47adc0> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd34927d080> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd368ee57c0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

References