{"id":"CVE-2024-26773","revision":"892ed67eb78642478d42305a6f0320b0","records":[{"revision":"892ed67eb78642478d42305a6f0320b0","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-26773","aliases":[],"title":"ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()\n\nDetermine if the group block bitmap is corrupted before using ac_b_ex in\next4_mb_try_best_found() to avoid allocating blocks from a group with a\ncorrupted block bitmap in the following concurrency and making the\nsituation worse.\n\next4_mb_regular_allocator\n  ext4_lock_group(sb, group)\n  ext4_mb_good_group\n   // check if the group bbitmap is corrupted\n  ext4_mb_complex_scan_group\n   // Scan group gets ac_b_ex but doesn't use it\n  ext4_unlock_group(sb, group)\n                           ext4_mark_group_bitmap_corrupted(group)\n                           // The block bitmap was corrupted during\n                           // the group unlock gap.\n  ext4_mb_try_best_found\n    ext4_lock_group(ac->ac_sb, group)\n    ext4_mb_use_best_found\n      mb_mark_used\n      // Allocating blocks in block bitmap corrupted group","state":0,"publishedAt":"2024-04-03T17:00:59.757+00:00","modifiedAt":"2026-10-15T00:38:30.96+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/mballoc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"21f8cfe79f776287459343e9cfa6055af61328ea\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"260fc96283c0f594de18a1b045faf6d8fb42874d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"927794a02169778c9c2e7b25c768ab3ea8c1dc03\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"4c21fa60a6f4606f6214a38f50612b17b2f738f5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"f97e75fa4e12b0aa0224e83fcbda8853ac2adf36\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"0184747b552d6b5a14db3b7fcc3b792ce64dedd1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"a2576ae9a35c078e488f2c573e9e6821d651fbbe\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"163a203ddb36c36d4a1c942aececda0cc8d06aa7\",\n                            \"lessThan\": \"4530b3660d396a646aad91a787b6ab37cf604b53\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/mballoc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.308\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.270\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.211\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.150\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.80\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.19\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.7.7\",\n                            \"lessThanOrEqual\": \"6.7.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.8\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/21f8cfe79f776287459343e9cfa6055af61328ea","https://git.kernel.org/stable/c/260fc96283c0f594de18a1b045faf6d8fb42874d","https://git.kernel.org/stable/c/927794a02169778c9c2e7b25c768ab3ea8c1dc03","https://git.kernel.org/stable/c/4c21fa60a6f4606f6214a38f50612b17b2f738f5","https://git.kernel.org/stable/c/f97e75fa4e12b0aa0224e83fcbda8853ac2adf36","https://git.kernel.org/stable/c/0184747b552d6b5a14db3b7fcc3b792ce64dedd1","https://git.kernel.org/stable/c/a2576ae9a35c078e488f2c573e9e6821d651fbbe","https://git.kernel.org/stable/c/4530b3660d396a646aad91a787b6ab37cf604b53"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-26773","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-26773","identifiers":["CVE-2024-26773"]},"retained":false,"historicalAffected":[]}],"coverage":[]}