CVE-2024-41086

bcachefs: Fix sb_field_downgrade validation

State: Published
Severity: 7.8 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bcachefs: Fix sb_field_downgrade validation

- bch2_sb_downgrade_validate() wasn't checking for a downgrade entry extending past the end of the superblock section

- for_each_downgrade_entry() is used in to_text() and needs to work on malformed input; it also was missing a check for a field extending past the end of the section

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	84f1638795da1ff2084597de4251e9054f1ad728 to before bf920ed92ef24dcd6970c88881cd4700b3acf05bAffected 84f1638795da1ff2084597de4251e9054f1ad728 to before 692aa7a54b2b28d59f24b3bf8250837805484b99Affected
LinuxLinux	6.7Affected before 6.7Not affected 6.9.8 through 6.9.*Not affected 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.