UBUNTU-CVE-2024-52560: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Mark inode as bad as soon as error detected in mienumattr() Extended the mienumattr() function interface with an additional parameter, struct ntfsinode ni, to allow marking the inode as bad as soon as an error is detected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-nvidia-tegrato a version that resolves this vulnerability.Fixed in 6.8.0-1035.38
Event History
Frequently Asked Questions
Which Ubuntu kernel packages are identified as affected?
The listed packages are ubuntu/linux-realtime, ubuntu/linux-azure, ubuntu/linux-gcp, ubuntu/linux-azure-fde, ubuntu/linux-gke, ubuntu/linux-gkeop, ubuntu/linux-riscv, and ubuntu/linux-aws-fips.
What filesystem code path does this fix concern?
The fix concerns the NTFS3 filesystem's mi_enum_attr() function. It changes the function interface so it can mark an NTFS inode as bad immediately when an error is detected.
Does the available information state which versions are fixed or whether a default configuration is affected?
No. The provided data does not include affected or fixed version numbers, configuration prerequisites, or default-installation exposure details.