CVE-2024-40971

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the f2fs component of the Linux kernel, where the SB INLINECRYPT flag is cleared and re-set during the f2fs remount process. If a new file is created or opened during this time, it may not use inlinecrypt, potentially leading to data corruption if wrappedkey v0 is enabled. This is due to a race condition between two threads, Thread A and Thread B, where Thread A clears the SB INLINECRYPT flag and Thread B attempts to use it before it is re-set.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.