CVE-2024-45026: s390/dasd: fix error recovery leading to data corruption on ESE devices
First published: Wed Sep 11 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient (ESE) or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasd_ese_needs_format function checks for error codes that signal the non existence of a proper track format. The check for incorrect length is to imprecise since other error cases leading to transport of insufficient data also have this flag set. This might lead to data corruption in certain error cases for example during a storage server warmstart. Fix by removing the check for incorrect length and replacing by explicitly checking for invalid track format in transport mode. Also remove the check for file protected since this is not a valid ESE handling case.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=5.3<5.4.283 | |
| Linux Kernel | >=5.5<5.10.225 | |
| Linux Kernel | >=5.11<5.15.166 | |
| Linux Kernel | >=5.16<6.1.107 | |
| Linux Kernel | >=6.2<6.6.48 | |
| Linux Kernel | >=6.7<6.10.7 | |
| Linux Kernel | =6.11-rc1 | |
| Linux Kernel | =6.11-rc2 | |
| Linux Kernel | =6.11-rc3 | |
| debian/linux | <=5.10.223-1<=5.10.226-1 | 6.1.123-1 6.1.119-1 6.12.11-1 6.12.12-1 |
| debian/linux-6.1 | 6.1.119-1~deb11u1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0a228896a1b3654cd461ff654f6a64e97a9c3246
- https://git.kernel.org/stable/c/19f60a55b2fda49bc4f6134a5f6356ef62ee69d8
- https://git.kernel.org/stable/c/5d4a304338daf83ace2887aaacafd66fe99ed5cc
- https://git.kernel.org/stable/c/7db4042336580dfd75cb5faa82c12cd51098c90b
- https://git.kernel.org/stable/c/93a7e2856951680cd7fe6ebd705ac10c8a8a5efd
- https://git.kernel.org/stable/c/a665e3b7ac7d5cdc26e00e3d0fc8fd490e00316a
- https://git.kernel.org/stable/c/e245a18281c252c8dbc467492e09bb5d4b012118
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45026
- https://nvd.nist.gov/vuln/detail/CVE-2024-45026
- https://launchpad.net/bugs/cve/CVE-2024-45026
- https://security-tracker.debian.org/tracker/CVE-2024-45026
- https://ubuntu.com/security/CVE-2024-45026
- https://git.kernel.org/linus/7db4042336580dfd75cb5faa82c12cd51098c90b
Frequently Asked Questions
What is the severity of CVE-2024-45026?
CVE-2024-45026 has a medium severity rating due to potential data corruption risks.
How do I fix CVE-2024-45026?
To fix CVE-2024-45026, update your Linux kernel to versions 6.1.123-1, 6.1.119-1, or any later patch version.
Which systems are affected by CVE-2024-45026?
CVE-2024-45026 affects various versions of the Linux kernel specifically used on ESE devices.
What types of data are at risk due to CVE-2024-45026?
CVE-2024-45026 poses a risk of data corruption during I/O operations on thin provisioned volumes.
Is there a workaround for CVE-2024-45026?
There is no official workaround for CVE-2024-45026; the best approach is to apply the appropriate kernel update.
- agent/title
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/weakness
- collector/launchpad-cve
- source/Launchpad
- agent/references
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-api
- package-manager/debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.3
- version/linux kernel/5.5
- version/linux kernel/5.11
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.11-rc1
- version/linux kernel/6.11-rc2
- version/linux kernel/6.11-rc3