CVE-2024-42160Improper Check for Unusual or Exceptional Conditions in Linux

Severity
7.8HIGHNVD
OSV5.5
EPSS
0.0%
top 93.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 30
Latest updateDec 12

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to check validation of fault attrs in parse_options(), let's fix to add check condition in f2fs_build_fault_attr(). - Use f2fs_build_fault_attr() in __sbi_store() to clean up code.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages9 packages

Also affects: Debian Linux 11.0

Patches

🔴Vulnerability Details

19
OSV
linux-gkeop vulnerabilities2024-12-12
OSV
linux-iot vulnerabilities2024-11-19
OSV
linux-azure-fde vulnerabilities2024-10-31
OSV
linux-azure vulnerabilities2024-10-17
OSV
linux-aws-6.8, linux-oracle-6.8 vulnerabilities2024-10-11

📋Vendor Advisories

19
Ubuntu
Linux kernel (GKE) vulnerabilities2024-12-12
Ubuntu
Linux kernel (IoT) vulnerabilities2024-11-19
Ubuntu
Linux kernel vulnerabilities2024-10-31
Ubuntu
Linux kernel (Azure) vulnerabilities2024-10-17
Ubuntu
Linux kernel vulnerabilities2024-10-11