PT-2024-7863 · Linux+5 · Linux Kernel+5
Published
2024-03-10
·
Updated
2025-02-03
·
CVE-2024-27036
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the cifs writeback functionality in the Linux kernel, which does not correctly handle cases where the
cifs extend writeback() function hits a point where it is considering an additional folio, but this would overrun the wsize. This leads to the xas pause() function being called, which advances the loop counter and skips the page. The problem can be resolved by calling xas reset() any time the decision is made not to process the page being looked at, but rather send the request being built and start a new one. This issue can be tested by creating a 64K file, mounting a cifs share with a wsize of 64000, copying the file to it, and then comparing the original file and the copy.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Infinite Loop
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu