CVE-2024-57839

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57839

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" This reverts commit 7c877586da3178974a8a94577b6045a48377ff25. Anders and Philippe have reported that recent kernels occasionally hang when used with NFS in readahead code. The problem has been bisected to 7c877586da3 ("readahead: properly shorten readahead when falling back to do_page_cache_ra()"). The cause of the problem is that ra->size can be shrunk by read_pages() call and subsequently we end up calling do_page_cache_ra() with negative (read huge positive) number of pages. Let's revert 7c877586da3 for now until we can find a proper way how the logic in read_pages() and page_cache_ra_order() can coexist. This can lead to reduced readahead throughput due to readahead window confusion but that's better than outright hangs.

References
Link Resource
https://git.kernel.org/stable/c/85351e4941a253e4c50fb7048bfc19b60b4ec44b Patch
https://git.kernel.org/stable/c/a220d6b95b1ae12c7626283d7609f0a1438e6437 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
History

17 Oct 2025, 15:26

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Revertir "readahead: acortar correctamente el readahead al volver a do_page_cache_ra()" Esto revierte el commit 7c877586da3178974a8a94577b6045a48377ff25. Anders y Philippe han informado de que los kernels recientes a veces se bloquean cuando se utilizan con NFS en el código readahead. El problema se ha dividido en 7c877586da3 ("readahead: acortar correctamente el readahead al volver a do_page_cache_ra()"). La causa del problema es que ra->size se puede reducir mediante la llamada read_pages() y, posteriormente, terminamos llamando a do_page_cache_ra() con un número de páginas negativo (leer positivo enorme). Revertiremos 7c877586da3 por ahora hasta que podamos encontrar una forma adecuada de que la lógica en read_pages() y page_cache_ra_order() pueda coexistir. Esto puede provocar una reducción del rendimiento de lectura anticipada debido a la confusión de la ventana de lectura anticipada, pero es mejor que los bloqueos directos.
CWE CWE-704
References () https://git.kernel.org/stable/c/85351e4941a253e4c50fb7048bfc19b60b4ec44b - () https://git.kernel.org/stable/c/85351e4941a253e4c50fb7048bfc19b60b4ec44b - Patch
References () https://git.kernel.org/stable/c/a220d6b95b1ae12c7626283d7609f0a1438e6437 - () https://git.kernel.org/stable/c/a220d6b95b1ae12c7626283d7609f0a1438e6437 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

11 Jan 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-11 15:15

Updated : 2025-10-17 15:26

NVD link : CVE-2024-57839

Mitre link : CVE-2024-57839

CVE.ORG link : CVE-2024-57839

JSON object : View

Products Affected

linux

CWE
CWE-704

Incorrect Type Conversion or Cast