CVE-2024-56750

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56750
In the Linux kernel, the following vulnerability has been resolved: erofs: fix blksize < PAGE_SIZE for file-backed mounts Adjust sb->s_blocksize{,_bits} directly for file-backed mounts when the fs block size is smaller than PAGE_SIZE. Previously, EROFS used sb_set_blocksize(), which caused a panic if bdev-backed mounts is not used.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/679d8537e5748241c71ac97a6b6dc919eae31716 Patch
https://git.kernel.org/stable/c/bae0854160939a64a092516ff1b2f221402b843b Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Jan 2025, 17:04

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/679d8537e5748241c71ac97a6b6dc919eae31716 - () https://git.kernel.org/stable/c/679d8537e5748241c71ac97a6b6dc919eae31716 - Patch
References () https://git.kernel.org/stable/c/bae0854160939a64a092516ff1b2f221402b843b - () https://git.kernel.org/stable/c/bae0854160939a64a092516ff1b2f221402b843b - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: erofs: corrige blksize &lt; PAGE_SIZE para montajes respaldados por archivos Ajuste sb-&gt;s_blocksize{,_bits} directamente para montajes respaldados por archivos cuando el tamaño de bloque fs es menor que PAGE_SIZE. Anteriormente, EROFS usaba sb_set_blocksize(), que causaba un pánico si no se usaban montajes respaldados por bdev.
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo

29 Dec 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-29 12:15

Updated : 2025-01-06 17:04

NVD link : CVE-2024-56750

Mitre link : CVE-2024-56750

CVE.ORG link : CVE-2024-56750

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo