PT-2024-32743 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-09-06
·
Updated
2026-03-14
·
CVE-2024-47690
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
The issue is related to the f2fs filesystem in the Linux kernel. A bug was reported by syzbot, which causes a kernel panic when online repair is performed on a corrupted directory. This happens because the online repair can generate dirty data or metadata while racing with a readonly remount, resulting in a dirty inode after the filesystem becomes readonly. The checkpoint function will skip flushing the dirty inode in readonly mode, leading to the panic. The estimated number of potentially affected devices is not provided.
Recommendations
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider disabling the online repair feature in f2fs lookup() to minimize the risk of exploitation. Restrict access to the f2fs filesystem to prevent potential attacks until the issue is resolved.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu