PT-2024-10496 · Linux+4 · Linux Kernel+4

Yunlei He · Published 2024-03-29 · Updated 2025-01-17 · CVE-2024-40971

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the f2fs component of the Linux kernel, where the SB INLINECRYPT flag is cleared and re-set during the f2fs remount process. If a new file is created or opened during this time, it may not use inlinecrypt, potentially leading to data corruption if wrappedkey v0 is enabled. This is due to a race condition between two threads, Thread A and Thread B, where Thread A clears the SB INLINECRYPT flag and Thread B attempts to use it before it is re-set.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-01047

CVE-2024-40971

DLA-4008-1

DSA-5730-1

DSA-5731-1

OESA-2024-1860

OESA-2024-1861

OESA-2024-1863

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7007-1

USN-7007-2

USN-7007-3

USN-7008-1

USN-7009-1

USN-7009-2

USN-7019-1

USN-7029-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 658

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40971.json · Exploit
• 🔥 https://github.com/MaherAzzouzi/CVE-2024-26817-amdkfd · Exploit
• https://ubuntu.com/security/CVE-2024-35984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://git.kernel.org/stable/c/a9cea0489c562c97cd56bb345e78939f9909e7f4 · Patch
• https://ubuntu.com/security/CVE-2024-26999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26817 · Vendor Advisory
• https://git.kernel.org/stable/c/eddeb8d941d5be11a9da5637dbe81ac37e8449a2 · Patch
• https://ubuntu.com/security/CVE-2024-27398 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-42127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39487 · Security Note
• https://ubuntu.com/security/CVE-2024-26973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38605 · Security Note