cve-2024-35844
Vulnerability from cvelistv5
Published
2024-05-17 14:40
Modified
2024-08-02 03:21
Severity
Summary
f2fs: compress: fix reserve_cblocks counting error when out of space
References
SourceURLTags
416baaa9-dc9f-4396-8d5f-8c081fb06d67http://www.openwall.com/lists/oss-security/2024/05/30/1
416baaa9-dc9f-4396-8d5f-8c081fb06d67http://www.openwall.com/lists/oss-security/2024/05/30/2
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2f6d721e14b69d6e1251f69fa238b48e8374e25f
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/569c198c9e2093fd29cc071856a4e548fda506bc
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/889846dfc8ee2cf31148a44bfd2faeb2faadc685
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f0bf89e84c3afb79d7a3a9e4bc853ad6a3245c0a
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fa3ac8b1a227d9b470b87972494293348b5839ee
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fc0aed88afbf6f606205129a7466eebdf528e3f3
Impacted products
VendorProduct
LinuxLinux
LinuxLinux
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-35844",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-17T16:58:26.825804Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:34:11.979Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:21:48.533Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fa3ac8b1a227d9b470b87972494293348b5839ee"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/889846dfc8ee2cf31148a44bfd2faeb2faadc685"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f0bf89e84c3afb79d7a3a9e4bc853ad6a3245c0a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/569c198c9e2093fd29cc071856a4e548fda506bc"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fc0aed88afbf6f606205129a7466eebdf528e3f3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2f6d721e14b69d6e1251f69fa238b48e8374e25f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/05/30/2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/05/30/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/file.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fa3ac8b1a227",
              "status": "affected",
              "version": "c75488fb4d82",
              "versionType": "git"
            },
            {
              "lessThan": "889846dfc8ee",
              "status": "affected",
              "version": "c75488fb4d82",
              "versionType": "git"
            },
            {
              "lessThan": "f0bf89e84c3a",
              "status": "affected",
              "version": "c75488fb4d82",
              "versionType": "git"
            },
            {
              "lessThan": "569c198c9e20",
              "status": "affected",
              "version": "c75488fb4d82",
              "versionType": "git"
            },
            {
              "lessThan": "fc0aed88afbf",
              "status": "affected",
              "version": "c75488fb4d82",
              "versionType": "git"
            },
            {
              "lessThan": "2f6d721e14b6",
              "status": "affected",
              "version": "c75488fb4d82",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/f2fs/file.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.8"
            },
            {
              "lessThan": "5.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.153",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.83",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.23",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.11",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix reserve_cblocks counting error when out of space\n\nWhen a file only needs one direct_node, performing the following\noperations will cause the file to be unrepairable:\n\nunisoc # ./f2fs_io compress test.apk\nunisoc #df -h | grep dm-48\n/dev/block/dm-48 112G 112G 1.2M 100% /data\n\nunisoc # ./f2fs_io release_cblocks test.apk\n924\nunisoc # df -h | grep dm-48\n/dev/block/dm-48 112G 112G 4.8M 100% /data\n\nunisoc # dd if=/dev/random of=file4 bs=1M count=3\n3145728 bytes (3.0 M) copied, 0.025 s, 120 M/s\nunisoc # df -h | grep dm-48\n/dev/block/dm-48 112G 112G 1.8M 100% /data\n\nunisoc # ./f2fs_io reserve_cblocks test.apk\nF2FS_IOC_RESERVE_COMPRESS_BLOCKS failed: No space left on device\n\nadb reboot\nunisoc # df -h  | grep dm-48\n/dev/block/dm-48             112G 112G   11M 100% /data\nunisoc # ./f2fs_io reserve_cblocks test.apk\n0\n\nThis is because the file has only one direct_node. After returning\nto -ENOSPC, reserved_blocks += ret will not be executed. As a result,\nthe reserved_blocks at this time is still 0, which is not the real\nnumber of reserved blocks. Therefore, fsck cannot be set to repair\nthe file.\n\nAfter this patch, the fsck flag will be set to fix this problem.\n\nunisoc # df -h | grep dm-48\n/dev/block/dm-48             112G 112G  1.8M 100% /data\nunisoc # ./f2fs_io reserve_cblocks test.apk\nF2FS_IOC_RESERVE_COMPRESS_BLOCKS failed: No space left on device\n\nadb reboot then fsck will be executed\nunisoc # df -h  | grep dm-48\n/dev/block/dm-48             112G 112G   11M 100% /data\nunisoc # ./f2fs_io reserve_cblocks test.apk\n924"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-29T05:29:59.295Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fa3ac8b1a227d9b470b87972494293348b5839ee"
        },
        {
          "url": "https://git.kernel.org/stable/c/889846dfc8ee2cf31148a44bfd2faeb2faadc685"
        },
        {
          "url": "https://git.kernel.org/stable/c/f0bf89e84c3afb79d7a3a9e4bc853ad6a3245c0a"
        },
        {
          "url": "https://git.kernel.org/stable/c/569c198c9e2093fd29cc071856a4e548fda506bc"
        },
        {
          "url": "https://git.kernel.org/stable/c/fc0aed88afbf6f606205129a7466eebdf528e3f3"
        },
        {
          "url": "https://git.kernel.org/stable/c/2f6d721e14b69d6e1251f69fa238b48e8374e25f"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/05/30/2"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/05/30/1"
        }
      ],
      "title": "f2fs: compress: fix reserve_cblocks counting error when out of space",
      "x_generator": {
        "engine": "bippy-a5840b7849dd"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-35844",
    "datePublished": "2024-05-17T14:40:11.419Z",
    "dateReserved": "2024-05-17T13:50:33.104Z",
    "dateUpdated": "2024-08-02T03:21:48.533Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-35844\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-17T15:15:21.390\",\"lastModified\":\"2024-06-10T18:15:35.250\",\"vulnStatus\":\"Awaiting Analysis\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nf2fs: compress: fix reserve_cblocks counting error when out of space\\n\\nWhen a file only needs one direct_node, performing the following\\noperations will cause the file to be unrepairable:\\n\\nunisoc # ./f2fs_io compress test.apk\\nunisoc #df -h | grep dm-48\\n/dev/block/dm-48 112G 112G 1.2M 100% /data\\n\\nunisoc # ./f2fs_io release_cblocks test.apk\\n924\\nunisoc # df -h | grep dm-48\\n/dev/block/dm-48 112G 112G 4.8M 100% /data\\n\\nunisoc # dd if=/dev/random of=file4 bs=1M count=3\\n3145728 bytes (3.0 M) copied, 0.025 s, 120 M/s\\nunisoc # df -h | grep dm-48\\n/dev/block/dm-48 112G 112G 1.8M 100% /data\\n\\nunisoc # ./f2fs_io reserve_cblocks test.apk\\nF2FS_IOC_RESERVE_COMPRESS_BLOCKS failed: No space left on device\\n\\nadb reboot\\nunisoc # df -h  | grep dm-48\\n/dev/block/dm-48             112G 112G   11M 100% /data\\nunisoc # ./f2fs_io reserve_cblocks test.apk\\n0\\n\\nThis is because the file has only one direct_node. After returning\\nto -ENOSPC, reserved_blocks += ret will not be executed. As a result,\\nthe reserved_blocks at this time is still 0, which is not the real\\nnumber of reserved blocks. Therefore, fsck cannot be set to repair\\nthe file.\\n\\nAfter this patch, the fsck flag will be set to fix this problem.\\n\\nunisoc # df -h | grep dm-48\\n/dev/block/dm-48             112G 112G  1.8M 100% /data\\nunisoc # ./f2fs_io reserve_cblocks test.apk\\nF2FS_IOC_RESERVE_COMPRESS_BLOCKS failed: No space left on device\\n\\nadb reboot then fsck will be executed\\nunisoc # df -h  | grep dm-48\\n/dev/block/dm-48             112G 112G   11M 100% /data\\nunisoc # ./f2fs_io reserve_cblocks test.apk\\n924\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: compress: corrige el error de conteo de reserve_cblocks cuando no hay espacio. Cuando un archivo solo necesita un direct_node, realizar las siguientes operaciones har\u00e1 que el archivo no se pueda reparar: unisoc # ./f2fs_io compress test.apk unisoc #df -h | grep dm-48 /dev/block/dm-48 112G 112G 1.2M 100% /data unisoc # ./f2fs_io release_cblocks test.apk 924 unisoc # df -h | grep dm-48 /dev/block/dm-48 112G 112G 4,8M 100% /data unisoc # dd if=/dev/random of=file4 bs=1M count=3 3145728 bytes (3,0 M) copiados, 0,025 s, 120 M/s unisoc # df -h | grep dm-48 /dev/block/dm-48 112G 112G 1.8M 100% /data unisoc # ./f2fs_io reserve_cblocks test.apk F2FS_IOC_RESERVE_COMPRESS_BLOCKS fall\u00f3: no queda espacio en el dispositivo adb reboot unisoc # df -h | grep dm-48 /dev/block/dm-48 112G 112G 11M 100% /data unisoc # ./f2fs_io reserve_cblocks test.apk 0 Esto se debe a que el archivo tiene solo un nodo_directo. Despu\u00e9s de regresar a -ENOSPC, reserve_blocks += ret no se ejecutar\u00e1. Como resultado, los bloques_reservados en este momento siguen siendo 0, que no es el n\u00famero real de bloques reservados. Por lo tanto, no se puede configurar fsck para reparar el archivo. Despu\u00e9s de este parche, se configurar\u00e1 el indicador fsck para solucionar este problema. unisoc # df -h | grep dm-48 /dev/block/dm-48 112G 112G 1.8M 100% /data unisoc # ./f2fs_io reserve_cblocks test.apk F2FS_IOC_RESERVE_COMPRESS_BLOCKS fall\u00f3: no queda espacio en el dispositivo y al reinicio del adb luego se ejecutar\u00e1 fsck unisoc # df -h | grep dm-48 /dev/block/dm-48 112G 112G 11M 100% /data unisoc # ./f2fs_io reserve_cblocks test.apk 924\"}],\"metrics\":{},\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2024/05/30/1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/05/30/2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/2f6d721e14b69d6e1251f69fa238b48e8374e25f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/569c198c9e2093fd29cc071856a4e548fda506bc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/889846dfc8ee2cf31148a44bfd2faeb2faadc685\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f0bf89e84c3afb79d7a3a9e4bc853ad6a3245c0a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fa3ac8b1a227d9b470b87972494293348b5839ee\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fc0aed88afbf6f606205129a7466eebdf528e3f3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.