{ "id": "CVE-2024-41086", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-07-29T16:15:04.043", "lastModified": "2024-11-21T09:32:12.953", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbcachefs: Fix sb_field_downgrade validation\n\n- bch2_sb_downgrade_validate() wasn't checking for a downgrade entry\n extending past the end of the superblock section\n\n- for_each_downgrade_entry() is used in to_text() and needs to work on\n malformed input; it also was missing a check for a field extending\n past the end of the section" }, { "lang": "es", "value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: bcachefs: corrigi\u00f3 la validaci\u00f3n de sb_field_downgrade - bch2_sb_downgrade_validate() no buscaba una entrada de degradaci\u00f3n que se extendiera m\u00e1s all\u00e1 del final de la secci\u00f3n de superbloque - for_each_downgrade_entry() se usa en to_text() y necesita trabajar con entradas mal formadas; Tambi\u00e9n faltaba una marca para un campo que se extend\u00eda m\u00e1s all\u00e1 del final de la secci\u00f3n." } ], "metrics": {}, "references": [ { "url": "https://git.kernel.org/stable/c/692aa7a54b2b28d59f24b3bf8250837805484b99", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/bf920ed92ef24dcd6970c88881cd4700b3acf05b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" }, { "url": "https://git.kernel.org/stable/c/692aa7a54b2b28d59f24b3bf8250837805484b99", "source": "af854a3a-2127-422b-91ae-364da2661108" }, { "url": "https://git.kernel.org/stable/c/bf920ed92ef24dcd6970c88881cd4700b3acf05b", "source": "af854a3a-2127-422b-91ae-364da2661108" } ] }