Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-41086

bcachefs: Fix sb_field_downgrade validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bcachefs: Fix sb_field_downgrade validation - bch2_sb_downgrade_validate() wasn't checking for a downgrade entry extending past the end of the superblock section - for_each_downgrade_entry() is used in to_text() and needs to work on malformed input; it also was missing a check for a field extending past the end of the section

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 84f1638795da1ff2084597de4251e9054f1ad728 to < bf920ed92ef24dcd6970c88881cd4700b3acf05baffected
  • 84f1638795da1ff2084597de4251e9054f1ad728 to < 692aa7a54b2b28d59f24b3bf8250837805484b99affected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.9.8 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References