{"id":"CVE-2024-43828","revision":"471f3846f3ac4bd681a6b0487711fb4a","records":[{"revision":"471f3846f3ac4bd681a6b0487711fb4a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-43828","aliases":[],"title":"ext4: fix infinite loop when replaying fast_commit","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix infinite loop when replaying fast_commit\n\nWhen doing fast_commit replay an infinite loop may occur due to an\nuninitialized extent_status struct.  ext4_ext_determine_insert_hole() does\nnot detect the replay and calls ext4_es_find_extent_range(), which will\nreturn immediately without initializing the 'es' variable.\n\nBecause 'es' contains garbage, an integer overflow may happen causing an\ninfinite loop in this function, easily reproducible using fstest generic/039.\n\nThis commit fixes this issue by unconditionally initializing the structure\nin function ext4_es_find_extent_range().\n\nThanks to Zhang Yi, for figuring out the real problem!","state":0,"publishedAt":"2024-08-17T09:21:47.429+00:00","modifiedAt":"2026-10-15T00:48:23.878+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/extents_status.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2\",\n                            \"lessThan\": \"5ed0496e383cb6de120e56991385dce70bbb87c1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2\",\n                            \"lessThan\": \"0619f7750f2b178a1309808832ab20d85e0ad121\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2\",\n                            \"lessThan\": \"181e63cd595c688194e07332f9944b3a63193de2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2\",\n                            \"lessThan\": \"c6e67df64783e99a657ef2b8c834ba2bf54c539c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2\",\n                            \"lessThan\": \"81f819c537d29932e4b9267f02411cbc8b355178\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2\",\n                            \"lessThan\": \"907c3fe532253a6ef4eb9c4d67efb71fab58c706\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/extents_status.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.10\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.224\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.165\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.103\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.44\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.10.3\",\n                            \"lessThanOrEqual\": \"6.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.11\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/5ed0496e383cb6de120e56991385dce70bbb87c1","https://git.kernel.org/stable/c/0619f7750f2b178a1309808832ab20d85e0ad121","https://git.kernel.org/stable/c/181e63cd595c688194e07332f9944b3a63193de2","https://git.kernel.org/stable/c/c6e67df64783e99a657ef2b8c834ba2bf54c539c","https://git.kernel.org/stable/c/81f819c537d29932e4b9267f02411cbc8b355178","https://git.kernel.org/stable/c/907c3fe532253a6ef4eb9c4d67efb71fab58c706"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-43828","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-43828","identifiers":["CVE-2024-43828"]},"retained":false,"historicalAffected":[]}],"coverage":[]}