CVE-2024-26772: ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()

Places the logic for checking if the group's block bitmap is corrupt under
the protection of the group lock to avoid allocating blocks from the group
with a corrupted block bitmap.

Classification

CVE ID: CVE-2024-26772

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 15.26% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://git.kernel.org/stable/c/5a6dcc4ad0f7f7fa8e8d127b5526e7c5f2d38a43
https://git.kernel.org/stable/c/6b92b1bc16d691c95b152c6dbf027ad64315668d
https://git.kernel.org/stable/c/ffeb72a80a82aba59a6774b0611f792e0ed3b0b7
https://git.kernel.org/stable/c/8de8305a25bfda607fc13475ebe84b978c96d7ff
https://git.kernel.org/stable/c/d639102f4cbd4cb65d1225dba3b9265596aab586
https://git.kernel.org/stable/c/d3bbe77a76bc52e9d4d0a120f1509be36e25c916
https://git.kernel.org/stable/c/21dbe20589c7f48e9c5d336ce6402bcebfa6d76a
https://git.kernel.org/stable/c/832698373a25950942c04a512daa652c18a9b513

Timeline