In the Linux kernel, the following vulnerability has been resolved:
udf: Avoid using corrupted block bitmap buffer
When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BH_verified bit to indicate whether the bitmap is valid or not.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42306.json",
"cna_assigner": "Linux"
}[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "__load_block_bitmap"
},
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"signature_version": "v1",
"id": "CVE-2024-42306-01bc28c7"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/super.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-101a8e76"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/super.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-27376e46"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/balloc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-3b726b55"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "__load_block_bitmap"
},
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"signature_version": "v1",
"id": "CVE-2024-42306-41528f0b"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/balloc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-4c86a9a6"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "read_block_bitmap"
},
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"signature_version": "v1",
"id": "CVE-2024-42306-4f33224d"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/super.c",
"function": "udf_sb_free_bitmap"
},
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"signature_version": "v1",
"id": "CVE-2024-42306-500ca559"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "__load_block_bitmap"
},
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"signature_version": "v1",
"id": "CVE-2024-42306-6224b2a8"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/balloc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-6fc4b2c9"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/super.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-743dfc8b"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/super.c",
"function": "udf_sb_free_bitmap"
},
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"signature_version": "v1",
"id": "CVE-2024-42306-8359b32e"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "read_block_bitmap"
},
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"signature_version": "v1",
"id": "CVE-2024-42306-9fd318c0"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cae9e59cc41683408b70b9ab569f8654866ba914",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/super.c",
"function": "udf_sb_free_bitmap"
},
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"signature_version": "v1",
"id": "CVE-2024-42306-b01cffdd"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "read_block_bitmap"
},
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"signature_version": "v1",
"id": "CVE-2024-42306-bb918a4d"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/super.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"173510065842862240688559629428267722706",
"89350695574797514877278760883914916205",
"35285866426440034852629147078123654997",
"98963197993708012742401972815090381657"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-bfb30944"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "__load_block_bitmap"
},
"digest": {
"length": 374.0,
"function_hash": "245033831799076864855293245084869922911"
},
"signature_version": "v1",
"id": "CVE-2024-42306-c4cdc814"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/super.c",
"function": "udf_sb_free_bitmap"
},
"digest": {
"length": 195.0,
"function_hash": "264484730867781825685109215301264799842"
},
"signature_version": "v1",
"id": "CVE-2024-42306-c687c076"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@271cab2ca00652bc984e269cf1208699a1e09cdd",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/udf/balloc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"66287488222707687127455373843085411924",
"53039204305716627041151833019988525189",
"339590370409403806974485123926547639462",
"155720852211226837464544521956359670942",
"121272929264149514684402993031642785778",
"297553275893346402748032167566375063325",
"178411572732025056790554298708900154866",
"23857834969061408213947098998664569413",
"1203895678607250643374685627125813323",
"59144337728605081343995669499768308744"
]
},
"signature_version": "v1",
"id": "CVE-2024-42306-daa3a174"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a43e3c210df6c5f00570f4be49a897677dbcb64",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/udf/balloc.c",
"function": "read_block_bitmap"
},
"digest": {
"length": 890.0,
"function_hash": "93800249098342167659141758185146961160"
},
"signature_version": "v1",
"id": "CVE-2024-42306-e39ea24b"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42306.json"