CVE-2024-42304

MEDIUM EPSS 13.0%
Published Aug 17, 20241y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Aug 17, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are reported when creating files in this directory in the following flow. ext4_mknod ... ext4_add_entry // Read block 0 ext4_read_dirblock(dir, block, DIRENT) bh = ext4_bread(NULL, inode, block, 0) if (!bh && (type == INDEX || type == DIRENT_HTREE)) // The first directory block is a hole // But type == DIRENT, so no error is reported. After that, we get a directory block without '.' and '..' but with a valid dentry. This may cause some code that relies on dot or dotdot (such as make_indexed_dir()) to crash. Therefore when ext4_read_dirblock() finds that the first directory block is a hole report that the filesystem is corrupted and return an error to avoid loading corrupted data from disk causing something bad.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
13.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 10

VendorProductVersionRange
linuxlinux_kernel*≥4.9.187  –  <4.10
linuxlinux_kernel*≥4.14.135  –  <4.15
linuxlinux_kernel*≥4.19.62  –  <4.19.320
linuxlinux_kernel*≥5.1.21  –  <5.2
linuxlinux_kernel*≥5.2.4  –  <5.4.282
linuxlinux_kernel*≥5.5  –  <5.10.224
linuxlinux_kernel*≥5.11  –  <5.15.165
linuxlinux_kernel*≥5.16  –  <6.1.103
linuxlinux_kernel*≥6.2  –  <6.6.44
linuxlinux_kernel*≥6.7  –  <6.10.3

References 11

  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-265688.html
  • git.kernel.org https://git.kernel.org/stable/c/299bc6ffa57e04e74c6cce866d6c0741fb4897a1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9771e3d8365ae1dd5e8846a204cb9af14e3e656a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b609753cbbd38f8c0affd4956c0af178348523ac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3893d9de8ee153baac56d127d844103488133b5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d81d7e347d1f1f48a5634607d39eb90c161c8afe
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/de2a011a13a46468a6e8259db58b1b62071fe136
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e02f9941e8c011aa3eafa799def6a134ce06bcfa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f9ca51596bbfd0f9c386dd1c613c394c78d9e5e6
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/299bc6ffa57e04e74c6cce866d6c0741fb4897a1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9771e3d8365ae1dd5e8846a204cb9af14e3e656a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b609753cbbd38f8c0affd4956c0af178348523ac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c3893d9de8ee153baac56d127d844103488133b5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d81d7e347d1f1f48a5634607d39eb90c161c8afe
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/de2a011a13a46468a6e8259db58b1b62071fe136
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e02f9941e8c011aa3eafa799def6a134ce06bcfa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f9ca51596bbfd0f9c386dd1c613c394c78d9e5e6
    Patch