{"id":"CVE-2024-42306","revision":"b9cd31ed0c194a8faabf8c512d96ae8e","records":[{"revision":"b9cd31ed0c194a8faabf8c512d96ae8e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-42306","aliases":[],"title":"udf: Avoid using corrupted block bitmap buffer","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Avoid using corrupted block bitmap buffer\n\nWhen the filesystem block bitmap is corrupted, we detect the corruption\nwhile loading the bitmap and fail the allocation with error. However the\nnext allocation from the same bitmap will notice the bitmap buffer is\nalready loaded and tries to allocate from the bitmap with mixed results\n(depending on the exact nature of the bitmap corruption). Fix the\nproblem by using BH_verified bit to indicate whether the bitmap is valid\nor not.","state":0,"publishedAt":"2024-08-17T09:09:11.938+00:00","modifiedAt":"2026-10-15T00:48:19.229+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/udf/balloc.c\",\n                        \"fs/udf/super.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7648ea9896b31aff38830d81188f5b7a1773e4a8\",\n                            \"lessThan\": \"cae9e59cc41683408b70b9ab569f8654866ba914\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4ac54312f623c6d2ca30c36c1ef530c11f5aff64\",\n                            \"lessThan\": \"2199e157a465aaf98294d3932797ecd7fce942d5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"099bf90d7fc4622da9fd4727f6d318a0f12d10be\",\n                            \"lessThan\": \"6a43e3c210df6c5f00570f4be49a897677dbcb64\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6ac8f2c8362afd2baa8e7b9c946597589e587d22\",\n                            \"lessThan\": \"271cab2ca00652bc984e269cf1208699a1e09cdd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d\",\n                            \"lessThan\": \"57053b3bcf3403b80db6f65aba284d7dfe7326af\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d\",\n                            \"lessThan\": \"8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d\",\n                            \"lessThan\": \"a90d4471146de21745980cba51ce88e7926bcc4f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f862a9049c3f6e73a5504a1ac10ffd5bc253ab55\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4622cc1b6d86013e01c56b60b092b5e4726c8e52\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5.4.257\",\n                            \"lessThan\": \"5.4.282\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.195\",\n                            \"lessThan\": \"5.10.224\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.132\",\n                            \"lessThan\": \"5.15.165\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.53\",\n                            \"lessThan\": \"6.1.103\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.14.326\",\n                            \"lessThan\": \"4.15\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.295\",\n                            \"lessThan\": \"4.20\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/udf/balloc.c\",\n                        \"fs/udf/super.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.3\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.282\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.103\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.44\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.3\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914","https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5","https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64","https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd","https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af","https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65","https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-42306","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-42306","identifiers":["CVE-2024-42306"]},"retained":false,"historicalAffected":[]}],"coverage":[]}