Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-40971
HistoryJul 12, 2024 - 1:15 p.m.

CVE-2024-40971

2024-07-1213:15:18
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
4
linux kernel
vulnerability
sb_inlinecrypt
f2fs
data corruption
wrappedkey_v0

EPSS

0

Percentile

10.6%

In the Linux kernel, the following vulnerability has been resolved:

f2fs: remove clear SB_INLINECRYPT flag in default_options

In f2fs_remount, SB_INLINECRYPT flag will be clear and re-set.
If create new file or open file during this gap, these files
will not use inlinecrypt. Worse case, it may lead to data
corruption if wrappedkey_v0 is enable.

Thread A: Thread B:

-f2fs_remount -f2fs_file_open or f2fs_new_inode
-default_options
<- clear SB_INLINECRYPT flag

                                      -fscrypt_select_encryption_impl

-parse_options
<- set SB_INLINECRYPT again