Description
In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to see old data. Move the call to SetPageUptodate into ubifs_write_end(), which is after we copied the new data into the page.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 4aa554832b9dc9e66249df75b8f447d87853e12eaffected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 778c6ad40256f1c03244fc06d7cdf71f6b5e7310affected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 8f599ab6fabbca4c741107eade70722a98adfd9faffected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < f19b1023a3758f40791ec166038d6411c8894ae3affected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 142d87c958d9454c3cffa625fab56f3016e8f9f3affected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < fc99f4e2d2f1ce766c14e98463c2839194ae964faffected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 4b7c4fc60d6a46350fbe54f5dc937aeaa02e675eaffected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 17772bbe9cfa972ea1ff827319f6e1340de76566affected1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d to < 723012cab779eee8228376754e22c6594229bf8faffected
Linux Linux
Default version status: affected
2.6.27affected0 to < 2.6.27unaffected4.19.312 to ≤ 4.19.*unaffected5.4.274 to ≤ 5.4.*unaffected5.10.215 to ≤ 5.10.*unaffected5.15.154 to ≤ 5.15.*unaffected6.1.84 to ≤ 6.1.*unaffected6.6.24 to ≤ 6.6.*unaffected6.7.12 to ≤ 6.7.*unaffected6.8.3 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4aa554832b9dc9e66249df75b8f447d87853e12e ↗
- https://git.kernel.org/stable/c/778c6ad40256f1c03244fc06d7cdf71f6b5e7310 ↗
- https://git.kernel.org/stable/c/8f599ab6fabbca4c741107eade70722a98adfd9f ↗
- https://git.kernel.org/stable/c/f19b1023a3758f40791ec166038d6411c8894ae3 ↗
- https://git.kernel.org/stable/c/142d87c958d9454c3cffa625fab56f3016e8f9f3 ↗
- https://git.kernel.org/stable/c/fc99f4e2d2f1ce766c14e98463c2839194ae964f ↗
- https://git.kernel.org/stable/c/4b7c4fc60d6a46350fbe54f5dc937aeaa02e675e ↗
- https://git.kernel.org/stable/c/17772bbe9cfa972ea1ff827319f6e1340de76566 ↗
- https://git.kernel.org/stable/c/723012cab779eee8228376754e22c6594229bf8f ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html ↗