CVE-2024-35821: ubifs: Set page uptodate in the correct place
In the Linux kernel, the following vulnerability has been resolved:
ubifs: Set page uptodate in the correct place
Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to see old data. Move the call to SetPageUptodate into ubifswriteend(), which is after we copied the new data into the page.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35821?
CVE-2024-35821 is classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-35821?
To fix CVE-2024-35821, you should upgrade to the recommended kernel versions, including 5.10.223-1, 5.10.226-1, 6.1.119-1, and others as specified.
What are the affected software versions for CVE-2024-35821?
Affected software versions for CVE-2024-35821 include specific versions of the Linux kernel, such as 5.10.223-1, 5.10.226-1, and others.
What does CVE-2024-35821 exploit?
CVE-2024-35821 exploits a flaw in the Linux kernel related to page cache reads being lockless.
Is there a public exploit available for CVE-2024-35821?
Currently, there is no publicly known exploit specifically targeting CVE-2024-35821.