2024-07-30 10:03:21 +00:00
{
"id" : "CVE-2024-42160" ,
"sourceIdentifier" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"published" : "2024-07-30T08:15:07.370" ,
2024-08-02 16:03:14 +00:00
"lastModified" : "2024-08-02T14:29:26.330" ,
"vulnStatus" : "Analyzed" ,
2024-07-30 10:03:21 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: check validation of fault attrs in f2fs_build_fault_attr()\n\n- It missed to check validation of fault attrs in parse_options(),\nlet's fix to add check condition in f2fs_build_fault_attr().\n- Use f2fs_build_fault_attr() in __sbi_store() to clean up code."
2024-07-30 14:03:15 +00:00
} ,
{
"lang" : "es" ,
"value" : " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: f2fs: verificar la validaci\u00f3n de los atributos de fallo en f2fs_build_fault_attr() - No se pudo verificar la validaci\u00f3n de los atributos de falla en parse_options(), arregl\u00e9moslo para agregar la condici\u00f3n de verificaci\u00f3n en f2fs_build_fault_attr(). - Utilice f2fs_build_fault_attr() en __sbi_store() para limpiar el c\u00f3digo."
2024-07-30 10:03:21 +00:00
}
] ,
2024-08-02 16:03:14 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-754"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "6.1.98" ,
"matchCriteriaId" : "59AC0B46-8C0D-4C0B-9705-C8CFF0DCAD00"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.2" ,
"versionEndExcluding" : "6.6.39" ,
"matchCriteriaId" : "29E894E4-668F-4DB0-81F7-4FB5F698E970"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "6.7" ,
"versionEndExcluding" : "6.9.9" ,
"matchCriteriaId" : "ADCC1407-0CB3-4C8F-B4C5-07F682CD7085"
}
]
}
]
}
] ,
2024-07-30 10:03:21 +00:00
"references" : [
{
"url" : "https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e" ,
2024-08-02 16:03:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-07-30 10:03:21 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77" ,
2024-08-02 16:03:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-07-30 10:03:21 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d" ,
2024-08-02 16:03:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-07-30 10:03:21 +00:00
} ,
{
"url" : "https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b" ,
2024-08-02 16:03:14 +00:00
"source" : "416baaa9-dc9f-4396-8d5f-8c081fb06d67" ,
"tags" : [
"Patch"
]
2024-07-30 10:03:21 +00:00
}
]
}