CVE-2024-26601: ext4: regenerate buddy after block freeing failed if under fc replay
In the Linux kernel, the following vulnerability has been resolved:
ext4: regenerate buddy after block freeing failed if under fc replay
The Linux kernel CVE team has assigned CVE-2024-26601 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024022411-CVE-2024-26601-b6ac@gregkh/T/#u
Other sources
In the Linux kernel, the following vulnerability has been resolved:
ext4: regenerate buddy after block freeing failed if under fc replay
This mostly reverts commit 6bd97bf273bd ("ext4: remove redundant mbregeneratebuddy()") and reintroduces mbregeneratebuddy(). Based on code in mbfreeblocks(), fast commit replay can end up marking as free blocks that are already marked as such. This causes corruption of the buddy bitmap so we need to regenerate it in that case.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26601?
CVE-2024-26601 is considered a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26601?
To mitigate CVE-2024-26601, upgrade to the patched versions of the kernel as recommended by your distribution.
What systems are affected by CVE-2024-26601?
CVE-2024-26601 affects multiple versions of the Linux kernel, including versions up to 6.7.5 and various others within specified ranges.
What is the nature of CVE-2024-26601?
CVE-2024-26601 involves a bug related to regenerating a buddy after block freeing failures during filecache replay.
Has CVE-2024-26601 been resolved?
Yes, CVE-2024-26601 has been resolved in newer versions of the Linux kernel.