In the Linux kernel, the following vulnerability has been resolved:
udf: Avoid using corrupted block bitmap buffer
When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BH_verified bit to indicate whether the bitmap is valid or not.
[
{
"id": "CVE-2024-42306-01bc28c7",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-101a8e76",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-27376e46",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-322c7f2e",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57053b3bcf3403b80db6f65aba284d7dfe7326af",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-3b726b55",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-4009b782",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57053b3bcf3403b80db6f65aba284d7dfe7326af",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-41528f0b",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-47e0a44b",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2199e157a465aaf98294d3932797ecd7fce942d5",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-4c86a9a6",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-4f33224d",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-500ca559",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-6224b2a8",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-63d94407",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a90d4471146de21745980cba51ce88e7926bcc4f",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-6fc4b2c9",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-72a35c81",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57053b3bcf3403b80db6f65aba284d7dfe7326af",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-743dfc8b",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-8359b32e",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-875ce0c9",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a90d4471146de21745980cba51ce88e7926bcc4f",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-88a74997",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2199e157a465aaf98294d3932797ecd7fce942d5",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-9fd318c0",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-a0e7d8af",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2199e157a465aaf98294d3932797ecd7fce942d5",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-a58e5d65",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a90d4471146de21745980cba51ce88e7926bcc4f",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-a6eddff7",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57053b3bcf3403b80db6f65aba284d7dfe7326af",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-b01cffdd",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-b0515206",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a90d4471146de21745980cba51ce88e7926bcc4f",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-b1551867",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@57053b3bcf3403b80db6f65aba284d7dfe7326af",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-bb918a4d",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-bfb30944",
"signature_type": "Line",
"digest": {
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-c4cdc814",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-c687c076",
"signature_type": "Function",
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"target": {
"function": "udf_sb_free_bitmap",
"file": "fs/udf/super.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-cbd4256a",
"signature_type": "Function",
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"target": {
"function": "__load_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a90d4471146de21745980cba51ce88e7926bcc4f",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-daa3a174",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-e39ea24b",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-e8231a81",
"signature_type": "Function",
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"target": {
"function": "read_block_bitmap",
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2199e157a465aaf98294d3932797ecd7fce942d5",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2024-42306-f590dab9",
"signature_type": "Line",
"digest": {
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
],
"threshold": 0.9
},
"target": {
"file": "fs/udf/balloc.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2199e157a465aaf98294d3932797ecd7fce942d5",
"signature_version": "v1",
"deprecated": false
}
]