CVE-2024-26773

ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()

State
Published
Severity
7.8 High
Published
Apr 3, 2024
Updated
Oct 15, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()

Determine if the group block bitmap is corrupted before using ac_b_ex in ext4_mb_try_best_found() to avoid allocating blocks from a group with a corrupted block bitmap in the following concurrency and making the situation worse.

ext4_mb_regular_allocator ext4_lock_group(sb, group) ext4_mb_good_group // check if the group bbitmap is corrupted ext4_mb_complex_scan_group // Scan group gets ac_b_ex but doesn't use it ext4_unlock_group(sb, group) ext4_mark_group_bitmap_corrupted(group) // The block bitmap was corrupted during // the group unlock gap. ext4_mb_try_best_found ext4_lock_group(ac->ac_sb, group) ext4_mb_use_best_found mb_mark_used // Allocating blocks in block bitmap corrupted group

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 21f8cfe79f776287459343e9cfa6055af61328eaAffected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 260fc96283c0f594de18a1b045faf6d8fb42874dAffected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 927794a02169778c9c2e7b25c768ab3ea8c1dc03Affected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 4c21fa60a6f4606f6214a38f50612b17b2f738f5Affected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before f97e75fa4e12b0aa0224e83fcbda8853ac2adf36Affected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 0184747b552d6b5a14db3b7fcc3b792ce64dedd1Affected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before a2576ae9a35c078e488f2c573e9e6821d651fbbeAffected
  • 163a203ddb36c36d4a1c942aececda0cc8d06aa7 to before 4530b3660d396a646aad91a787b6ab37cf604b53Affected
LinuxLinux
  • 3.12Affected
  • before 3.12Not affected
  • 4.19.308 through 4.19.*Not affected
  • 5.4.270 through 5.4.*Not affected
  • 5.10.211 through 5.10.*Not affected
  • 5.15.150 through 5.15.*Not affected
  • 6.1.80 through 6.1.*Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.