{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2024-42306", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-07-30T07:40:12.273Z", "datePublished": "2024-08-17T09:09:11.938Z", "dateUpdated": "2026-05-23T15:52:49.858Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T15:52:49.858Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Avoid using corrupted block bitmap buffer\n\nWhen the filesystem block bitmap is corrupted, we detect the corruption\nwhile loading the bitmap and fail the allocation with error. However the\nnext allocation from the same bitmap will notice the bitmap buffer is\nalready loaded and tries to allocate from the bitmap with mixed results\n(depending on the exact nature of the bitmap corruption). Fix the\nproblem by using BH_verified bit to indicate whether the bitmap is valid\nor not." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "fs/udf/balloc.c", "fs/udf/super.c" ], "versions": [ { "version": "7648ea9896b31aff38830d81188f5b7a1773e4a8", "lessThan": "cae9e59cc41683408b70b9ab569f8654866ba914", "status": "affected", "versionType": "git" }, { "version": "4ac54312f623c6d2ca30c36c1ef530c11f5aff64", "lessThan": "2199e157a465aaf98294d3932797ecd7fce942d5", "status": "affected", "versionType": "git" }, { "version": "099bf90d7fc4622da9fd4727f6d318a0f12d10be", "lessThan": "6a43e3c210df6c5f00570f4be49a897677dbcb64", "status": "affected", "versionType": "git" }, { "version": "6ac8f2c8362afd2baa8e7b9c946597589e587d22", "lessThan": "271cab2ca00652bc984e269cf1208699a1e09cdd", "status": "affected", "versionType": "git" }, { "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d", "lessThan": "57053b3bcf3403b80db6f65aba284d7dfe7326af", "status": "affected", "versionType": "git" }, { "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d", "lessThan": "8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65", "status": "affected", "versionType": "git" }, { "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d", "lessThan": "a90d4471146de21745980cba51ce88e7926bcc4f", "status": "affected", "versionType": "git" }, { "version": "f862a9049c3f6e73a5504a1ac10ffd5bc253ab55", "status": "affected", "versionType": "git" }, { "version": "4622cc1b6d86013e01c56b60b092b5e4726c8e52", "status": "affected", "versionType": "git" }, { "version": "5.4.257", "lessThan": "5.4.282", "status": "affected", "versionType": "semver" }, { "version": "5.10.195", "lessThan": "5.10.224", "status": "affected", "versionType": "semver" }, { "version": "5.15.132", "lessThan": "5.15.165", "status": "affected", "versionType": "semver" }, { "version": "6.1.53", "lessThan": "6.1.103", "status": "affected", "versionType": "semver" }, { "version": "4.14.326", "lessThan": "4.15", "status": "affected", "versionType": "semver" }, { "version": "4.19.295", "lessThan": "4.20", "status": "affected", "versionType": "semver" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "fs/udf/balloc.c", "fs/udf/super.c" ], "versions": [ { "version": "6.3", "status": "affected" }, { "version": "0", "lessThan": "6.3", "status": "unaffected", "versionType": "semver" }, { "version": "5.4.282", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.224", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.165", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.103", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.44", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.10.3", "lessThanOrEqual": "6.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.11", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "cpeApplicability": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.257", "versionEndExcluding": "5.4.282" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.195", "versionEndExcluding": "5.10.224" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.132", "versionEndExcluding": "5.15.165" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.53", "versionEndExcluding": "6.1.103" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.6.44" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.10.3" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.3", "versionEndExcluding": "6.11" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.326" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.295" } ] } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914" }, { "url": "https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5" }, { "url": "https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64" }, { "url": "https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd" }, { "url": "https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af" }, { "url": "https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65" }, { "url": "https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f" } ], "title": "udf: Avoid using corrupted block bitmap buffer", "x_generator": { "engine": "bippy-1.2.0" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "id": "CVE-2024-42306", "role": "CISA Coordinator", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "version": "2.0.3", "timestamp": "2024-09-10T16:10:15.929324Z" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-12T17:33:27.843Z" } }, { "title": "CVE Program Container", "references": [ { "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html" } ], "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T22:04:14.937Z" } }, { "x_adpType": "supplier", "providerMetadata": { "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "shortName": "siemens-SADP", "dateUpdated": "2026-05-12T11:56:52.686Z" }, "affected": [ { "vendor": "Siemens", "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem", "versions": [ { "status": "affected", "version": "0", "lessThan": "*", "versionType": "custom" } ], "defaultStatus": "unknown" } ], "references": [ { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ] } ] } }