CVE-2024-47725

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-47725
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVSS

No CVSS.

References

No reference.

Configurations

No configuration.

History

23 Oct 2024, 06:15

Type Values Removed Values Added
References
  • {'url': 'https://git.kernel.org/stable/c/338b32a232bbee39e52dd1486cbc0c9f458d4d69', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/b332bcca59143cfdd000957f8b78c28dd2ac1da4', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/cada2646b7483cce370eb3b046659df31d9d34d1', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://git.kernel.org/stable/c/e6a3531dd542cb127c8de32ab1e54a48ae19962b', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
Summary (en) In the Linux kernel, the following vulnerability has been resolved: dm-verity: restart or panic on an I/O error Maxim Suhanov reported that dm-verity doesn't crash if an I/O error happens. In theory, this could be used to subvert security, because an attacker can create sectors that return error with the Write Uncorrectable command. Some programs may misbehave if they have to deal with EIO. This commit fixes dm-verity, so that if "panic_on_corruption" or "restart_on_corruption" was specified and an I/O error happens, the machine will panic or restart. This commit also changes kernel_restart to emergency_restart - kernel_restart calls reboot notifiers and these reboot notifiers may wait for the bio that failed. emergency_restart doesn't call the notifiers. (en) Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

21 Oct 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-21 13:15

Updated : 2024-10-23 06:15

NVD link : CVE-2024-47725

Mitre link : CVE-2024-47725

CVE.ORG link : CVE-2024-47725

JSON object : View

Products Affected

No product.

CWE

No CWE.