PT-2024-21544 · Linux+3 · Linux Kernel+3

Published 2024-04-17 · Updated 2026-05-26 · CVE-2024-26869

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition in the Linux kernel can cause data corruption. The issue occurs when the invalidate mapping pages() function fails to invalidate a meta inode page due to lock failure or dirty/writeback status. This can lead to data corruption when the f2fs submit page bio() function writes last dirty data to an old block address. To resolve this issue, the truncate inode pages range() function should be used instead of invalidate mapping pages() to ensure the meta inode page is dropped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

AZL-61721

CVE-2024-26869

ECHO-225C-65A8-298E

OESA-2024-1622

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 330

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26869.json · Exploit
• https://git.kernel.org/stable/c/77bfdb89cc222fc7bfe198eda77bdc427d5ac189 · Patch
• https://ubuntu.com/security/CVE-2024-35798 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26862 · Security Note
• https://ubuntu.com/security/CVE-2024-27073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26754 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-26735 · Security Note
• https://git.kernel.org/stable/c/c92f2927df860a60ba815d3ee610a944b92a8694 · Patch
• https://ubuntu.com/security/CVE-2024-26969 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26883 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35830 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27034 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35829 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2024-26869 · Vendor Advisory