In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid allocating blocks from corrupted group in ext4mbtrybestfound()
Determine if the group block bitmap is corrupted before using acbex in ext4mbtrybestfound() to avoid allocating blocks from a group with a corrupted block bitmap in the following concurrency and making the situation worse.
ext4mbregularallocator ext4lockgroup(sb, group) ext4mbgoodgroup // check if the group bbitmap is corrupted ext4mbcomplexscangroup // Scan group gets acbex but doesn't use it ext4unlockgroup(sb, group) ext4markgroupbitmapcorrupted(group) // The block bitmap was corrupted during // the group unlock gap. ext4mbtrybestfound ext4lockgroup(ac->acsb, group) ext4mbusebestfound mbmark_used // Allocating blocks in block bitmap corrupted group
{ "vanir_signatures": [ { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@260fc96283c0f594de18a1b045faf6d8fb42874d", "id": "CVE-2024-26773-0fd13dcc", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "138400352369138022010797715807154981125", "107561524212781927081842156542201049435", "127479874811333874347459674808402787808", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "281853928766493046489766210324733492697" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2576ae9a35c078e488f2c573e9e6821d651fbbe", "id": "CVE-2024-26773-3b375818", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "326578529432269402759707433231634747129", "185048024045944286999559600774886156846", "123830103344533594910192098424911114946", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "234318695478645953900510006379910881178" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0184747b552d6b5a14db3b7fcc3b792ce64dedd1", "id": "CVE-2024-26773-3d12ca1f", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 479.0, "function_hash": "31980248150004958498486111074539899379" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@260fc96283c0f594de18a1b045faf6d8fb42874d", "id": "CVE-2024-26773-40e22a9a", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 494.0, "function_hash": "268509564449546584096479441370397175587" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c21fa60a6f4606f6214a38f50612b17b2f738f5", "id": "CVE-2024-26773-41c24858", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "138400352369138022010797715807154981125", "107561524212781927081842156542201049435", "127479874811333874347459674808402787808", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "281853928766493046489766210324733492697" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4530b3660d396a646aad91a787b6ab37cf604b53", "id": "CVE-2024-26773-4cc43125", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "326578529432269402759707433231634747129", "185048024045944286999559600774886156846", "123830103344533594910192098424911114946", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "234318695478645953900510006379910881178" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0184747b552d6b5a14db3b7fcc3b792ce64dedd1", "id": "CVE-2024-26773-518ca53c", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "326578529432269402759707433231634747129", "185048024045944286999559600774886156846", "123830103344533594910192098424911114946", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "234318695478645953900510006379910881178" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@927794a02169778c9c2e7b25c768ab3ea8c1dc03", "id": "CVE-2024-26773-85c43fc4", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "138400352369138022010797715807154981125", "107561524212781927081842156542201049435", "127479874811333874347459674808402787808", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "281853928766493046489766210324733492697" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21f8cfe79f776287459343e9cfa6055af61328ea", "id": "CVE-2024-26773-912f7418", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 494.0, "function_hash": "268509564449546584096479441370397175587" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f97e75fa4e12b0aa0224e83fcbda8853ac2adf36", "id": "CVE-2024-26773-98e437cf", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 494.0, "function_hash": "268509564449546584096479441370397175587" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4530b3660d396a646aad91a787b6ab37cf604b53", "id": "CVE-2024-26773-b10f753e", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 479.0, "function_hash": "31980248150004958498486111074539899379" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a2576ae9a35c078e488f2c573e9e6821d651fbbe", "id": "CVE-2024-26773-bc413dd8", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 479.0, "function_hash": "31980248150004958498486111074539899379" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c21fa60a6f4606f6214a38f50612b17b2f738f5", "id": "CVE-2024-26773-bd1ec25f", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 494.0, "function_hash": "268509564449546584096479441370397175587" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21f8cfe79f776287459343e9cfa6055af61328ea", "id": "CVE-2024-26773-dbe4a79a", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "138400352369138022010797715807154981125", "107561524212781927081842156542201049435", "127479874811333874347459674808402787808", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "281853928766493046489766210324733492697" ], "threshold": 0.9 }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c", "function": "ext4_mb_try_best_found" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@927794a02169778c9c2e7b25c768ab3ea8c1dc03", "id": "CVE-2024-26773-f4ffd523", "signature_version": "v1", "signature_type": "Function", "digest": { "length": 494.0, "function_hash": "268509564449546584096479441370397175587" }, "deprecated": false }, { "target": { "file": "fs/ext4/mballoc.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f97e75fa4e12b0aa0224e83fcbda8853ac2adf36", "id": "CVE-2024-26773-fa57f927", "signature_version": "v1", "signature_type": "Line", "digest": { "line_hashes": [ "138400352369138022010797715807154981125", "107561524212781927081842156542201049435", "127479874811333874347459674808402787808", "124095154180828182179062154038013582210", "35519734344993668987323432576969632910", "54558523398777946895517055096537525575", "281853928766493046489766210324733492697" ], "threshold": 0.9 }, "deprecated": false } ] }