What’s Vulnerable › Vulnerabilities
CVE-2024-42160: f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-07-30 · updated 2026-06-17
- Weakness: CWE-754
Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to check validation of fault attrs in parse_options(), let's fix to add check condition in f2fs_build_fault_attr(). - Use f2fs_build_fault_attr() in __sbi_store() to clean up code.
Affected products
- Debian Linux: 11.0
- Linux kernel: from 4.7 before 5.15.181; from 5.16 before 6.1.98; from 6.2 before 6.6.39; from 6.7 before 6.9.9 — fixed in 5.15.181, 6.1.98, 6.6.39, 6.9.9
How to fix
Upgrade to a fixed version: Linux kernel 5.15.181, 6.1.98, 6.6.39, 6.9.9. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e
- https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77
- https://git.kernel.org/stable/c/6e5b601706ce05d94338cad598736d96bb8096c8
- https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d
- https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b
- https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e
- https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77
- https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d
- https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Get alerted when CVE-2024-42160 or the next vulnerability affects your stack