PT-2024-29184 · Linux +4 · Linux Kernel +4

Light Hsieh

·

Published

2024-04-03

·

Updated

2024-11-21

·

CVE-2024-40969

Report an issue
CVSS v2.0
7.5
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions:

Linux kernel (affected versions not specified)

Description:

The issue is related to the Linux kernel's f2fs file system, where shutdown does not check the error of thaw super due to readonly, causing a deadlock. The deadlock occurs when f2fs ioc shutdown is called with F2FS GOING DOWN FULLSYNC, leading to a series of function calls that result in a wait for kthread stop(discard thread). Technical details about the issue include the involvement of functions such as f2fs stop checkpoint, f2fs handle critical error, and thaw super locked.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Improper Locking

Weakness Enumeration

CWE-833CWE-362CWE-667

Related Identifiers

ALT-PU-2024-14046
BDU:2025-03029
CVE-2024-40969
USN-6999-1
USN-6999-2
USN-7004-1
USN-7005-1
USN-7005-2
USN-7008-1
USN-7029-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Ubuntu