CVE-2024-43859: f2fs: fix to truncate preallocated blocks in f2fs_file_open()
f2fs: fix to truncate preallocated blocks in f2fsfileopen()
Other sources
In multiple locations, there is a possible persistent denial of service due to uninitialized data. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2026-03-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43859?
CVE-2024-43859 has a moderate severity due to potential kernel NULL pointer dereference issues leading to a denial of service.
How do I fix CVE-2024-43859?
To fix CVE-2024-43859, update to the patched versions of the Linux kernel specified in the security advisory.
Which Linux kernel versions are affected by CVE-2024-43859?
CVE-2024-43859 affects Linux kernel versions between 5.17 and 6.6.44, as well as between 6.7 and 6.10.3.
What type of vulnerability is CVE-2024-43859?
CVE-2024-43859 is a vulnerability related to the f2fs filesystem that can lead to a kernel crash.
Who reported the bug for CVE-2024-43859?
The bug leading to CVE-2024-43859 was reported by the researcher chenyuwen.