CVE-2024-42160

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in f2fsbuildfaultattr. - Use f2fsbuildfaultattr in sbistore to clean up...

CVE-2024-42160 f2fs: check validation of fault attrs in f2fs_build_fault_attr()

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fsbuildfaultattr - It missed to check validation of fault attrs in parseoptions, let's fix to add check condition in f2fsbuildfaultattr. - Use f2fsbuildfaultattr in sbistore to clean up...

CVE-2024-42160

Summary (CVE-2024-42160): In the Linux kernel, the f2fs subsystem had a validation gap in fault attribute handling. Specifically, fault attrs were not validated in parse_options(), and the patch adds a check in f2fs_build_fault_attr() and switches to using f2fs_build_fault_attr() in __sbi_store()...