CVE-2024-47700: ext4: check stripe size compatibility on remount as well
In the Linux kernel, the following vulnerability has been resolved:
ext4: check stripe size compatibility on remount as well
We disable stripe size in ext4fillsuper if it is not a multiple of the cluster ratio however this check is missed when trying to remount. This can leave us with cases where stripe < clusterratio after remount:set making EXT4B2C(sbi->sstripe) become 0 that can cause some unforeseen bugs like divide by 0.
Fix that by adding the check in remount path as well.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
ext4: check stripe size compatibility on remount as well
We disable stripe size in ext4fillsuper if it is not a multiple of the cluster ratio however this check is missed when trying to remount. This can leave us with cases where stripe < clusterratio after remount:set making EXT4B2C(sbi->sstripe) become 0 that can cause some unforeseen bugs like divide by 0.
Fix that by adding the check in remount path as well.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47700?
CVE-2024-47700 has been assigned a severity rating based on its potential impact on system stability and data integrity.
How do I fix CVE-2024-47700?
To fix CVE-2024-47700, update your Linux kernel to the latest version that addresses this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-47700?
CVE-2024-47700 affects Linux kernel versions between 6.5 and 6.6.54, as well as 6.7 to 6.10.13, and 6.11 to 6.11.2.
What does CVE-2024-47700 exploit?
CVE-2024-47700 exploits a check for stripe size compatibility in the ext4 filesystem during the remount process.
Is it safe to use affected versions of the Linux kernel with CVE-2024-47700?
Using affected versions of the Linux kernel without remediation poses a risk to system stability and data integrity.