4.7

CVE-2024-49859

f2fs: fix to check atomic_file in f2fs ioctl interfaces

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to check atomic_file in f2fs ioctl interfaces

Some f2fs ioctl interfaces like f2fs_ioc_set_pin_file(),
f2fs_move_file_range(), and f2fs_defragment_range() missed to
check atomic_write status, which may cause potential race issue,
fix it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 6.1.113
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.54
Linux ≫ Linux Kernel Version >= 6.7 < 6.10.13
Linux ≫ Linux Kernel Version >= 6.11 < 6.11.2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.052
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://git.kernel.org/stable/c/10569b682ebe9c75ef06ddd322ae844e9be6374b
Patch
https://git.kernel.org/stable/c/26b07bd2e1f124b0e430c8d250023f7205c549c3
Patch
https://git.kernel.org/stable/c/7cb51731f24b216b0b87942f519f2c67a17107ee
Patch
https://git.kernel.org/stable/c/bfe5c02654261bfb8bd9cb174a67f3279ea99e58
Patch
https://git.kernel.org/stable/c/d6f08c88047accc6127dddb6798a3ff11321539d
Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html