CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer
In the Linux kernel, the following vulnerability has been resolved:
udf: Avoid using corrupted block bitmap buffer
When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BHverified bit to indicate whether the bitmap is valid or not.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42306?
CVE-2024-42306 has a severity rating that indicates it poses a risk to the integrity of the Linux kernel's filesystem handling.
How do I fix CVE-2024-42306?
To fix CVE-2024-42306, you should upgrade your Linux kernel to the recommended versions such as 5.10.226-1 or 6.1.123-1.
What systems are affected by CVE-2024-42306?
CVE-2024-42306 affects specific versions of the Linux kernel including those up to 5.10.223-1 and older kernel versions.
What is the impact of CVE-2024-42306?
The impact of CVE-2024-42306 involves failure in block bitmap allocation which could lead to filesystem corruption.
Is CVE-2024-42306 exploitable?
Yes, CVE-2024-42306 is considered exploitable under certain conditions where corrupted block bitmap buffers are involved.