Products
Linux kernel
linux_kernel
- *
linux_kernel
- 6
- .
- 1
- 0
Source
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Tags
CVE-2024-42231 details
Last Modified : July 30, 2024, 7:30 p.m.
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix calc_available_free_space() for zoned mode calc_available_free_space() returns the total size of metadata (or system) block groups, which can be allocated from unallocated disk space. The logic is wrong on zoned mode in two places. First, the calculation of data_chunk_size is wrong. We always allocate one zone as one chunk, and no partial allocation of a zone. So, we should use zone_size (= data_sinfo->chunk_size) as it is. Second, the result "avail" may not be zone aligned. Since we always allocate one zone as one chunk on zoned mode, returning non-zone size aligned bytes will result in less pressure on the async metadata reclaim process. This is serious for the nearly full state with a large zone size device. Allowing over-commit too much will result in less async reclaim work and end up in ENOSPC. We can align down to the zone size to avoid that.
CVSS Score
| 1 | 2 | 3 | 4 | 5.5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-682 | Incorrect Calculation | The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management. |
CVSS Data
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Base Score
5.5
Exploitability Score
1.8
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
| URL | Source |
|---|---|
| https://git.kernel.org/stable/c/64d2c847ba380e07b9072d65a50aa6469d2aa43f | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
| https://git.kernel.org/stable/c/8548903b1999bba02a2b894ad750ab8eb1f40307 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
CPEs
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| o | linux | linux_kernel | / | / | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10 | rc1 | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10 | rc2 | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10 | rc3 | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10 | rc4 | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10 | rc5 | / | / | / | / | / | / |
| o | linux | linux_kernel | 6.10 | rc6 | / | / | / | / | / | / |