CVE-2024-47700

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47700
In the Linux kernel, the following vulnerability has been resolved: ext4: check stripe size compatibility on remount as well We disable stripe size in __ext4_fill_super if it is not a multiple of the cluster ratio however this check is missed when trying to remount. This can leave us with cases where stripe < cluster_ratio after remount:set making EXT4_B2C(sbi->s_stripe) become 0 that can cause some unforeseen bugs like divide by 0. Fix that by adding the check in remount path as well.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/297615e992bbb30a55c158141086be6505d5d722 Patch
https://git.kernel.org/stable/c/a31b712f75445d52fc0451dc54fd7b16a552cb7c Patch
https://git.kernel.org/stable/c/ee85e0938aa8f9846d21e4d302c3cf6a2a75110d Patch
https://git.kernel.org/stable/c/faeff8b1ee2eaa5969c8e994d66c3337298cefed Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Oct 2024, 21:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/297615e992bbb30a55c158141086be6505d5d722 - () https://git.kernel.org/stable/c/297615e992bbb30a55c158141086be6505d5d722 - Patch
References () https://git.kernel.org/stable/c/a31b712f75445d52fc0451dc54fd7b16a552cb7c - () https://git.kernel.org/stable/c/a31b712f75445d52fc0451dc54fd7b16a552cb7c - Patch
References () https://git.kernel.org/stable/c/ee85e0938aa8f9846d21e4d302c3cf6a2a75110d - () https://git.kernel.org/stable/c/ee85e0938aa8f9846d21e4d302c3cf6a2a75110d - Patch
References () https://git.kernel.org/stable/c/faeff8b1ee2eaa5969c8e994d66c3337298cefed - () https://git.kernel.org/stable/c/faeff8b1ee2eaa5969c8e994d66c3337298cefed - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-369
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: comprobar la compatibilidad del tamaño de la franja al volver a montar también Deshabilitamos el tamaño de la franja en __ext4_fill_super si no es un múltiplo de la relación del clúster; sin embargo, esta comprobación se omite al intentar volver a montar. Esto puede dejarnos con casos en los que stripe &lt; cluster_ratio después de remount:set, lo que hace que EXT4_B2C(sbi-&gt;s_stripe) se convierta en 0, lo que puede causar algunos errores imprevistos como dividir por 0. Solucione eso agregando la comprobación en la ruta de montaje también.

21 Oct 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 12:15

Updated : 2024-10-23 21:27

NVD link : CVE-2024-47700

Mitre link : CVE-2024-47700

CVE.ORG link : CVE-2024-47700

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero