CVE-2024-46780

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46780

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: nilfs2: protect references to superblock parameters exposed in sysfs The superblock buffers of nilfs2 can not only be overwritten at runtime for modifications/repairs, but they are also regularly swapped, replaced during resizing, and even abandoned when degrading to one side due to backing device issues. So, accessing them requires mutual exclusion using the reader/writer semaphore "nilfs->ns_sem". Some sysfs attribute show methods read this superblock buffer without the necessary mutual exclusion, which can cause problems with pointer dereferencing and memory access, so fix it.

References
Link Resource
https://git.kernel.org/stable/c/157c0d94b4c40887329418c70ef4edd1a8d6b4ed Patch
https://git.kernel.org/stable/c/19cfeba0e4b8eda51484fcf8cf7d150418e1d880 Patch
https://git.kernel.org/stable/c/683408258917541bdb294cd717c210a04381931e Patch
https://git.kernel.org/stable/c/8c6e43b3d5f109cf9c61bc188fcc8175404e924f Patch
https://git.kernel.org/stable/c/962562d4c70c5cdeb4e955d63ff2017c4eca1aad Patch
https://git.kernel.org/stable/c/b14e7260bb691d7f563f61da07d61e3c8b59a614 Patch
https://git.kernel.org/stable/c/b90beafac05931cbfcb6b1bd4f67c1923f47040e Patch
https://git.kernel.org/stable/c/ba97ba173f9625d5f34a986088979eae8b80d38e Patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*
History

03 Nov 2025, 23:16

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html -
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

20 Nov 2024, 17:31

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/157c0d94b4c40887329418c70ef4edd1a8d6b4ed - () https://git.kernel.org/stable/c/157c0d94b4c40887329418c70ef4edd1a8d6b4ed - Patch
References () https://git.kernel.org/stable/c/19cfeba0e4b8eda51484fcf8cf7d150418e1d880 - () https://git.kernel.org/stable/c/19cfeba0e4b8eda51484fcf8cf7d150418e1d880 - Patch
References () https://git.kernel.org/stable/c/683408258917541bdb294cd717c210a04381931e - () https://git.kernel.org/stable/c/683408258917541bdb294cd717c210a04381931e - Patch
References () https://git.kernel.org/stable/c/8c6e43b3d5f109cf9c61bc188fcc8175404e924f - () https://git.kernel.org/stable/c/8c6e43b3d5f109cf9c61bc188fcc8175404e924f - Patch
References () https://git.kernel.org/stable/c/962562d4c70c5cdeb4e955d63ff2017c4eca1aad - () https://git.kernel.org/stable/c/962562d4c70c5cdeb4e955d63ff2017c4eca1aad - Patch
References () https://git.kernel.org/stable/c/b14e7260bb691d7f563f61da07d61e3c8b59a614 - () https://git.kernel.org/stable/c/b14e7260bb691d7f563f61da07d61e3c8b59a614 - Patch
References () https://git.kernel.org/stable/c/b90beafac05931cbfcb6b1bd4f67c1923f47040e - () https://git.kernel.org/stable/c/b90beafac05931cbfcb6b1bd4f67c1923f47040e - Patch
References () https://git.kernel.org/stable/c/ba97ba173f9625d5f34a986088979eae8b80d38e - () https://git.kernel.org/stable/c/ba97ba173f9625d5f34a986088979eae8b80d38e - Patch
CWE NVD-CWE-noinfo

20 Sep 2024, 12:30

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: protege las referencias a los parámetros de superbloque expuestos en sysfs Los búferes de superbloque de nilfs2 no solo se pueden sobrescribir en tiempo de ejecución para modificaciones/reparaciones, sino que también se intercambian regularmente, se reemplazan durante el cambio de tamaño e incluso se abandonan cuando se degradan a un lado debido a problemas con el dispositivo de respaldo. Por lo tanto, acceder a ellos requiere exclusión mutua utilizando el semáforo de lectura/escritura "nilfs->ns_sem". Algunos métodos de demostración del atributo sysfs leen este búfer de superbloque sin la exclusión mutua necesaria, lo que puede causar problemas con la desreferenciación de punteros y el acceso a la memoria, así que arréglelo.

18 Sep 2024, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-18 08:15

Updated : 2025-11-03 23:16

NVD link : CVE-2024-46780

Mitre link : CVE-2024-46780

CVE.ORG link : CVE-2024-46780

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo