CVE-2024-42160

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-42160
In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to check validation of fault attrs in parse_options(), let's fix to add check condition in f2fs_build_fault_attr(). - Use f2fs_build_fault_attr() in __sbi_store() to clean up code.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e Patch
https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77 Patch
https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d Patch
https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

02 Aug 2024, 14:29

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e - () https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e - Patch
References () https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77 - () https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77 - Patch
References () https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d - () https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d - Patch
References () https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b - () https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b - Patch
CWE CWE-754

30 Jul 2024, 13:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: f2fs: verificar la validación de los atributos de fallo en f2fs_build_fault_attr() - No se pudo verificar la validación de los atributos de falla en parse_options(), arreglémoslo para agregar la condición de verificación en f2fs_build_fault_attr(). - Utilice f2fs_build_fault_attr() en __sbi_store() para limpiar el código.

30 Jul 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-30 08:15

Updated : 2024-08-02 14:29

NVD link : CVE-2024-42160

Mitre link : CVE-2024-42160

CVE.ORG link : CVE-2024-42160

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-754

Improper Check for Unusual or Exceptional Conditions