{"id":"CVE-2024-40971","revision":"191e2ef66a444d9b958115aac07e1f5b","records":[{"revision":"191e2ef66a444d9b958115aac07e1f5b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-40971","aliases":[],"title":"f2fs: remove clear SB_INLINECRYPT flag in default_options","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: remove clear SB_INLINECRYPT flag in default_options\n\nIn f2fs_remount, SB_INLINECRYPT flag will be clear and re-set.\nIf create new file or open file during this gap, these files\nwill not use inlinecrypt. Worse case, it may lead to data\ncorruption if wrappedkey_v0 is enable.\n\nThread A:                               Thread B:\n\n-f2fs_remount\t\t\t\t-f2fs_file_open or f2fs_new_inode\n  -default_options\n\t<- clear SB_INLINECRYPT flag\n\n                                          -fscrypt_select_encryption_impl\n\n  -parse_options\n\t<- set SB_INLINECRYPT again","state":0,"publishedAt":"2024-07-12T12:32:09.44+00:00","modifiedAt":"2026-10-15T00:46:18.132+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/f2fs/super.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"98e4da8ca301e062d79ae168c67e56f3c3de3ce4\",\n                            \"lessThan\": \"38a82c8d00638bb642bef787eb1d5e0e4d3b7d71\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"98e4da8ca301e062d79ae168c67e56f3c3de3ce4\",\n                            \"lessThan\": \"724429db09e21ee153fef35e34342279d33df6ae\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"98e4da8ca301e062d79ae168c67e56f3c3de3ce4\",\n                            \"lessThan\": \"a9cea0489c562c97cd56bb345e78939f9909e7f4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"98e4da8ca301e062d79ae168c67e56f3c3de3ce4\",\n                            \"lessThan\": \"eddeb8d941d5be11a9da5637dbe81ac37e8449a2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"98e4da8ca301e062d79ae168c67e56f3c3de3ce4\",\n                            \"lessThan\": \"ae39c8ec4250d2a35ddaab1c40faacfec306ff66\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"98e4da8ca301e062d79ae168c67e56f3c3de3ce4\",\n                            \"lessThan\": \"ac5eecf481c29942eb9a862e758c0c8b68090c33\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/f2fs/super.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.8\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.221\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.162\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.96\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.36\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.9.7\",\n                            \"lessThanOrEqual\": \"6.9.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H","score":7.3,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/38a82c8d00638bb642bef787eb1d5e0e4d3b7d71","https://git.kernel.org/stable/c/724429db09e21ee153fef35e34342279d33df6ae","https://git.kernel.org/stable/c/a9cea0489c562c97cd56bb345e78939f9909e7f4","https://git.kernel.org/stable/c/eddeb8d941d5be11a9da5637dbe81ac37e8449a2","https://git.kernel.org/stable/c/ae39c8ec4250d2a35ddaab1c40faacfec306ff66","https://git.kernel.org/stable/c/ac5eecf481c29942eb9a862e758c0c8b68090c33"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-40971","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-40971","identifiers":["CVE-2024-40971"]},"retained":false,"historicalAffected":[]}],"coverage":[]}