PT-2024-29774 · Linux+2 · Linux Kernel+2
Theodore Tso
·
Published
2024-06-13
·
Updated
2024-12-12
·
CVE-2024-42149
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises when a block device is frozen before being claimed by a filesystem, and another process attempts to mount the frozen block device. This can cause a concurrent
fs bdev thaw() call, leading to the mounter aborting the mounting process due to an elevated bdev->bd fsfreeze count. The get bdev super() function will return NULL in such cases. Technical details include the involvement of dm suspend() and dm resume() calls, which interact with bdev freeze() and fs bdev thaw() functions. Variables such as bdev->bd fsfreeze count play a crucial role in this process.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu