CVE-2024-42160

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

Published Jul 30, 2024 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
In the Linux kernel, the following vulnerability has been resolved:

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

- It missed to check validation of fault attrs in parse_options(),
let's fix to add check condition in f2fs_build_fault_attr().
- Use f2fs_build_fault_attr() in __sbi_store() to clean up code.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-4008-1 linux-6.1 security update
Ubuntu USN Ubuntu USN USN-7020-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7020-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7020-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7020-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-4 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7021-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7022-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7022-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7022-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7028-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7028-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7029-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7119-1 Linux kernel (IoT) vulnerabilities
Ubuntu USN Ubuntu USN USN-7156-1 Linux kernel (GKE) vulnerabilities
History
Type Values Removed Values Added
First Time appeared Debian
Debian debian Linux
CPEs cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Vendors & Products Debian
Debian debian Linux
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Weaknesses CWE-20
Weaknesses

Sources

Status
PUBLISHED
Assigner
Linux
Published
Updated
May 11, 2026, 8:28 PM
Reserved
Jul 29, 2024, 3:50 PM
Status
Analyzed
Published
Jul 30, 2024, 8:15 AM
Modified
Jun 17, 2026, 7:48 AM
Severity
Moderate
Public date
Jul 30, 2024, 12:00 AM