CVE-2024-42296

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
17/08/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> f2fs: fix return value of f2fs_convert_inline_inode()<br /> <br /> If device is readonly, make f2fs_convert_inline_inode()<br /> return EROFS instead of zero, otherwise it may trigger<br /> panic during writeback of inline inode&amp;#39;s dirty page as<br /> below:<br /> <br /> f2fs_write_single_data_page+0xbb6/0x1e90 fs/f2fs/data.c:2888<br /> f2fs_write_cache_pages fs/f2fs/data.c:3187 [inline]<br /> __f2fs_write_data_pages fs/f2fs/data.c:3342 [inline]<br /> f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3369<br /> do_writepages+0x359/0x870 mm/page-writeback.c:2634<br /> filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:397<br /> __filemap_fdatawrite_range mm/filemap.c:430 [inline]<br /> file_write_and_wait_range+0x1aa/0x290 mm/filemap.c:788<br /> f2fs_do_sync_file+0x68a/0x1ae0 fs/f2fs/file.c:276<br /> generic_write_sync include/linux/fs.h:2806 [inline]<br /> f2fs_file_write_iter+0x7bd/0x24e0 fs/f2fs/file.c:4977<br /> call_write_iter include/linux/fs.h:2114 [inline]<br /> new_sync_write fs/read_write.c:497 [inline]<br /> vfs_write+0xa72/0xc90 fs/read_write.c:590<br /> ksys_write+0x1a0/0x2c0 fs/read_write.c:643<br /> do_syscall_x64 arch/x86/entry/common.c:52 [inline]<br /> do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83<br /> entry_SYSCALL_64_after_hwframe+0x77/0x7f

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 3.8 (including) 5.15.165 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.103 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.44 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.3 (excluding)