PT-2024-29855 · Linux+5 · Linux Kernel+5
Published
2024-06-26
·
Updated
2025-02-03
·
CVE-2024-42306
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The issue is related to the udf component of the Linux kernel, where a corrupted block bitmap buffer can cause mixed results during allocation, potentially leading to privilege escalation. The problem is fixed by using the BH verified bit to indicate whether the bitmap is valid or not.
Recommendations
Update to Linux kernel version 6.6.50 or later to resolve the issue.
As a temporary workaround, consider restricting access to the udf component until a patch is available.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu