CVE-2024-47701

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem When looking up for an entry in an inlined directory, if e_value_offs is changed underneath the filesystem by some change in the block device, it will lead to an out-of-bounds access that KASAN detects as an UAF. EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. loop0: detected capacity change from 2048 to 2047 ================================================================== BUG: KASAN: us...

Affected product and versions

Product

Linux Linux, RUGGEDCOM RST2428P, SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family

Affected versions

>= e8e948e7802a2ab05c146d3e72a39b93b5718236 < 5b076d37e8d99918e9294bd6b35a8bbb436819b0, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < 8adf0eb4e361a9e060d54f4bd0ac9c5d85277d20, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < 7fc22c3b3ffc0e952f5e0062dd11aa6ae76affba, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < be2e9b111e2790962cc66a177869b4e9717b4e29, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < ea32883e4a03ed575a2eb7a66542022312bde477, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < 2a6579ef5f2576a940125729f7409cc182f1c8df, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < 371d0bacecd529f887ea2547333d9173e7bcdc0a, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < ccb8c18076e2e630fea23fbec583cdad61787fc5, >= e8e948e7802a2ab05c146d3e72a39b93b5718236 < c6b72f5d82b1017bad80f9ebf502832fc321d796, >= 3.8, < V3.2, >= V3.1.0 < V3.1.5, >= 3.8 < 5.10.227, >= 5.11 < 5.15.168, >= 5.16 < 6.1.113, >= 6.2 < 6.6.54, >= 6.7 < 6.10.13, >= 6.11 < 6.11.2

Fixed versions

5.10.227, 5.15.168, 6.1.113, 6.6.54, 6.10.13, 6.11.2

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416