Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40971
HistoryJul 12, 2024 - 12:32 p.m.

CVE-2024-40971 f2fs: remove clear SB_INLINECRYPT flag in default_options

2024-07-1212:32:09
Linux
github.com
1
linux kernel
vulnerability
f2fs
remount
inlinecrypt
data corruption
wrappedkey_v0

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

f2fs: remove clear SB_INLINECRYPT flag in default_options

In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set.
If create new file or open file during this gap, these files
will not use inlinecrypt. Worse case, it may lead to data
corruption if wrappedkey_v0 is enable.

Thread A: Thread B:

-f2fs_remount -f2fs_file_open or f2fs_new_inode
-default_options
<- clear SB_INLINECRYPT flag

                                      -fscrypt_select_encryption_impl

-parse_options
<- set SB_INLINECRYPT again

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial