PT-2024-29774

CVE-2024-42149

·

تاريخ النشر

2024-06-13

·

تاريخ التحديث

2024-12-12

الوصف من

CVSS 2.0
7.5
عالية
المقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises when a block device is frozen before being claimed by a filesystem, and another process attempts to mount the frozen block device. This can cause a concurrent fs bdev thaw() call, leading to the mounter aborting the mounting process due to an elevated bdev->bd fsfreeze count. The get bdev super() function will return NULL in such cases. Technical details include the involvement of dm suspend() and dm resume() calls, which interact with bdev freeze() and fs bdev thaw() functions. Variables such as bdev->bd fsfreeze count play a crucial role in this process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾