CVE-2024-35821 ubifs: Set page uptodate in the correct place

2024-05-1713:23:24

Linux

www.cve.org

linux

kernel

vulnerability

cve-2024-35821

page cache

fix

ubifs

setpageuptodate

ubifs_write_end

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.0%

JSON

In the Linux kernel, the following vulnerability has been resolved:

ubifs: Set page uptodate in the correct place

Page cache reads are lockless, so setting the freshly allocated page
uptodate before we’ve overwritten it with the data it’s supposed to have
in it will allow a simultaneous reader to see old data. Move the call
to SetPageUptodate into ubifs_write_end(), which is after we copied the
new data into the page.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ubifs/file.c"
    ],
    "versions": [
      {
        "version": "1e51764a3c2a",
        "lessThan": "4aa554832b9d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "778c6ad40256",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "8f599ab6fabb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "f19b1023a375",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "142d87c958d9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "fc99f4e2d2f1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "4b7c4fc60d6a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "17772bbe9cfa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1e51764a3c2a",
        "lessThan": "723012cab779",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ubifs/file.c"
    ],
    "versions": [
      {
        "version": "2.6.27",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.27",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "4.19.312",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.274",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.215",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.154",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.84",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.24",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.12",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.3",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.9",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]