CVE-2024-39467

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37

Description A vulnerability in the Linux kernel has been resolved, which was caused by a missing sanity check on i xattr nid during f2fs iget(). This led to current nat addr() accessing nat bitmap with an offset from an invalid i xattr nid, resulting in a slab-out-of-bounds bug report. The issue was identified by syzbot and has been fixed.

Recommendations To resolve this issue, update the Linux kernel to version 6.6.37 or later. As a temporary workaround, consider disabling the f2fs xattr fiemap function until a patch is available. Restrict access to the f2fs module to minimize the risk of exploitation. Avoid using the ioctl fiemap API endpoint until the issue is resolved.