CVE-2024-42160

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

• It missed to check validation of fault attrs in parse_options(), let’s fix to add check condition in f2fs_build_fault_attr().
• Use f2fs_build_fault_attr() in __sbi_store() to clean up code.

Affected product:

AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS

Affected packages:

kernel-uek @ 5.4.17 (+15 more)

In the Linux kernel, the following vulnerability has been resolved:

f2fs: check validation of fault attrs in f2fs_build_fault_attr()

• It missed to check validation of fault attrs in parse_options(), let’s fix to add check condition in f2fs_build_fault_attr().
• Use f2fs_build_fault_attr() in __sbi_store() to clean up code.