CVE-2024-47700

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47700
In the Linux kernel, the following vulnerability has been resolved: ext4: check stripe size compatibility on remount as well We disable stripe size in __ext4_fill_super if it is not a multiple of the cluster ratio however this check is missed when trying to remount. This can leave us with cases where stripe < cluster_ratio after remount:set making EXT4_B2C(sbi->s_stripe) become 0 that can cause some unforeseen bugs like divide by 0. Fix that by adding the check in remount path as well.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/297615e992bbb30a55c158141086be6505d5d722 Patch
https://git.kernel.org/stable/c/a31b712f75445d52fc0451dc54fd7b16a552cb7c Patch
https://git.kernel.org/stable/c/ee85e0938aa8f9846d21e4d302c3cf6a2a75110d Patch
https://git.kernel.org/stable/c/faeff8b1ee2eaa5969c8e994d66c3337298cefed Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Oct 2024, 21:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-369
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: comprobar la compatibilidad del tamaño de la franja al volver a montar también Deshabilitamos el tamaño de la franja en __ext4_fill_super si no es un múltiplo de la relación del clúster; sin embargo, esta comprobación se omite al intentar volver a montar. Esto puede dejarnos con casos en los que stripe &lt; cluster_ratio después de remount:set, lo que hace que EXT4_B2C(sbi-&gt;s_stripe) se convierta en 0, lo que puede causar algunos errores imprevistos como dividir por 0. Solucione eso agregando la comprobación en la ruta de montaje también.
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/297615e992bbb30a55c158141086be6505d5d722 - () https://git.kernel.org/stable/c/297615e992bbb30a55c158141086be6505d5d722 - Patch
References () https://git.kernel.org/stable/c/a31b712f75445d52fc0451dc54fd7b16a552cb7c - () https://git.kernel.org/stable/c/a31b712f75445d52fc0451dc54fd7b16a552cb7c - Patch
References () https://git.kernel.org/stable/c/ee85e0938aa8f9846d21e4d302c3cf6a2a75110d - () https://git.kernel.org/stable/c/ee85e0938aa8f9846d21e4d302c3cf6a2a75110d - Patch
References () https://git.kernel.org/stable/c/faeff8b1ee2eaa5969c8e994d66c3337298cefed - () https://git.kernel.org/stable/c/faeff8b1ee2eaa5969c8e994d66c3337298cefed - Patch

21 Oct 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 12:15

Updated : 2024-10-23 21:27

NVD link : CVE-2024-47700

Mitre link : CVE-2024-47700

CVE.ORG link : CVE-2024-47700

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-369

Divide By Zero