CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit
ext4: fix infinite loop when replaying fastcommit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43828?
The severity of CVE-2024-43828 is classified as medium, as it can lead to an infinite loop during the fast_commit replay process.
How do I fix CVE-2024-43828?
To fix CVE-2024-43828, users should upgrade to the affected remediated versions of the Linux kernel as specified in the vulnerability report.
Which versions of the Linux kernel are affected by CVE-2024-43828?
CVE-2024-43828 affects Linux kernel versions up to 5.10.223-1, and various versions in the 5.11 to 6.6.x ranges.
What specific action is causing the CVE-2024-43828 vulnerability?
CVE-2024-43828 is caused by an infinite loop that occurs due to an uninitialized extent_status struct during the fast_commit replay process.
Are there any patches available for CVE-2024-43828?
Yes, patches for CVE-2024-43828 are included in specific updated versions of the Linux kernel that address the looping issue.