CVE-2024-42306 (GCVE-0-2024-42306)
Vulnerability from cvelistv5
Published
2024-08-17 09:09
Modified
2026-08-05 11:36
Severity ?
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BH_verified bit to indicate whether the bitmap is valid or not.
References
Impacted products
Vendor Product Version
Linux Linux Version: 7648ea9896b31aff38830d81188f5b7a1773e4a8
Version: 4ac54312f623c6d2ca30c36c1ef530c11f5aff64
Version: 099bf90d7fc4622da9fd4727f6d318a0f12d10be
Version: 6ac8f2c8362afd2baa8e7b9c946597589e587d22
Version: 1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d
Version: 1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d
Version: 1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d
Version: f862a9049c3f6e73a5504a1ac10ffd5bc253ab55
Version: 4622cc1b6d86013e01c56b60b092b5e4726c8e52
Version: 5.4.257   ≤
Version: 5.10.195   ≤
Version: 5.15.132   ≤
Version: 6.1.53   ≤
Version: 4.14.326   ≤
Version: 4.19.295   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42306",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:10:15.929324Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:27.843Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:04:14.937Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:56:52.686Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/udf/balloc.c",
            "fs/udf/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "cae9e59cc41683408b70b9ab569f8654866ba914",
              "status": "affected",
              "version": "7648ea9896b31aff38830d81188f5b7a1773e4a8",
              "versionType": "git"
            },
            {
              "lessThan": "2199e157a465aaf98294d3932797ecd7fce942d5",
              "status": "affected",
              "version": "4ac54312f623c6d2ca30c36c1ef530c11f5aff64",
              "versionType": "git"
            },
            {
              "lessThan": "6a43e3c210df6c5f00570f4be49a897677dbcb64",
              "status": "affected",
              "version": "099bf90d7fc4622da9fd4727f6d318a0f12d10be",
              "versionType": "git"
            },
            {
              "lessThan": "271cab2ca00652bc984e269cf1208699a1e09cdd",
              "status": "affected",
              "version": "6ac8f2c8362afd2baa8e7b9c946597589e587d22",
              "versionType": "git"
            },
            {
              "lessThan": "57053b3bcf3403b80db6f65aba284d7dfe7326af",
              "status": "affected",
              "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
              "versionType": "git"
            },
            {
              "lessThan": "8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65",
              "status": "affected",
              "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
              "versionType": "git"
            },
            {
              "lessThan": "a90d4471146de21745980cba51ce88e7926bcc4f",
              "status": "affected",
              "version": "1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "f862a9049c3f6e73a5504a1ac10ffd5bc253ab55",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4622cc1b6d86013e01c56b60b092b5e4726c8e52",
              "versionType": "git"
            },
            {
              "lessThan": "5.4.282",
              "status": "affected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.224",
              "status": "affected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.165",
              "status": "affected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.103",
              "status": "affected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.295",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/udf/balloc.c",
            "fs/udf/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "lessThan": "6.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "5.4.257",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "5.10.195",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "5.15.132",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "6.1.53",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.326",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.295",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Avoid using corrupted block bitmap buffer\n\nWhen the filesystem block bitmap is corrupted, we detect the corruption\nwhile loading the bitmap and fail the allocation with error. However the\nnext allocation from the same bitmap will notice the bitmap buffer is\nalready loaded and tries to allocate from the bitmap with mixed results\n(depending on the exact nature of the bitmap corruption). Fix the\nproblem by using BH_verified bit to indicate whether the bitmap is valid\nor not."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached through local filesystem operations (write/create/mkdir) on a mounted UDF volume, whose image is attacker-supplied via removable media or a loop device \u2014 no network path exists.\nAC:L - Triggering is fully deterministic and requires no race: the attacker crafts a UDF image with a bitmap whose own descriptor blocks are marked free, then performs two block allocations \u2014 the first fails with -EFSCORRUPTED, the second silently uses the cached corrupt bitmap.\nPR:L - UDF images from removable media are routinely auto-mounted by desktop/kiosk automounters (udisks2) without administrator action, after which any unprivileged local user with write access to the volume reaches udf_new_block() and triggers the corrupt-bitmap allocation path.\nUI:N - Once the malicious volume is present, no victim action is needed \u2014 the attacker performs the two allocations themselves via ordinary file creation or write syscalls; automount requires no interactive step.\nS:U - The corruption is confined to kernel memory and filesystem metadata within the same security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Allocating the bitmap\u0027s own blocks makes one buffer_head serve as both the space bitmap and an allocation extent descriptor, so the extent parser reads attacker-influenced bitmap bytes as extent offsets and lengths, yielding out-of-bounds reads and disclosure of adjacent kernel buffer contents.\nI:H - The resulting type confusion lets bitmap bit-set/clear operations write into a live allocExtDesc (and vice versa), producing attacker-influenced metadata corruption and out-of-bounds writes usable for further heap corruption.\nA:H - The condition reproduces the syzbot-reported WARNING in __udf_add_aext() and leads to cascading metadata corruption and kernel oops, rendering the system unavailable."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:33.068Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914"
        },
        {
          "url": "https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64"
        },
        {
          "url": "https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd"
        },
        {
          "url": "https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af"
        },
        {
          "url": "https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65"
        },
        {
          "url": "https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f"
        }
      ],
      "title": "udf: Avoid using corrupted block bitmap buffer",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42306",
    "datePublished": "2024-08-17T09:09:11.938Z",
    "dateReserved": "2024-07-30T07:40:12.273Z",
    "dateUpdated": "2026-08-05T11:36:33.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:04:14.937Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-265688.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-05-12T11:56:52.686Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-42306\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:10:15.929324Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:23.498Z\"}}], \"cna\": {\"title\": \"udf: Avoid using corrupted block bitmap buffer\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"7648ea9896b31aff38830d81188f5b7a1773e4a8\", \"lessThan\": \"cae9e59cc41683408b70b9ab569f8654866ba914\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4ac54312f623c6d2ca30c36c1ef530c11f5aff64\", \"lessThan\": \"2199e157a465aaf98294d3932797ecd7fce942d5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"099bf90d7fc4622da9fd4727f6d318a0f12d10be\", \"lessThan\": \"6a43e3c210df6c5f00570f4be49a897677dbcb64\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"6ac8f2c8362afd2baa8e7b9c946597589e587d22\", \"lessThan\": \"271cab2ca00652bc984e269cf1208699a1e09cdd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d\", \"lessThan\": \"57053b3bcf3403b80db6f65aba284d7dfe7326af\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d\", \"lessThan\": \"8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1e0d4adf17e7ef03281d7b16555e7c1508c8ed2d\", \"lessThan\": \"a90d4471146de21745980cba51ce88e7926bcc4f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f862a9049c3f6e73a5504a1ac10ffd5bc253ab55\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4622cc1b6d86013e01c56b60b092b5e4726c8e52\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5.4.257\", \"lessThan\": \"5.4.282\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.10.195\", \"lessThan\": \"5.10.224\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.15.132\", \"lessThan\": \"5.15.165\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.1.53\", \"lessThan\": \"6.1.103\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.14.326\", \"lessThan\": \"4.15\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"4.19.295\", \"lessThan\": \"4.20\", \"versionType\": \"semver\"}], \"programFiles\": [\"fs/udf/balloc.c\", \"fs/udf/super.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.3\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.3\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.282\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.224\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.165\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.103\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.44\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/udf/balloc.c\", \"fs/udf/super.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/cae9e59cc41683408b70b9ab569f8654866ba914\"}, {\"url\": \"https://git.kernel.org/stable/c/2199e157a465aaf98294d3932797ecd7fce942d5\"}, {\"url\": \"https://git.kernel.org/stable/c/6a43e3c210df6c5f00570f4be49a897677dbcb64\"}, {\"url\": \"https://git.kernel.org/stable/c/271cab2ca00652bc984e269cf1208699a1e09cdd\"}, {\"url\": \"https://git.kernel.org/stable/c/57053b3bcf3403b80db6f65aba284d7dfe7326af\"}, {\"url\": \"https://git.kernel.org/stable/c/8ca170c39eca7cad6e0cfeb24e351d8f8eddcd65\"}, {\"url\": \"https://git.kernel.org/stable/c/a90d4471146de21745980cba51ce88e7926bcc4f\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nudf: Avoid using corrupted block bitmap buffer\\n\\nWhen the filesystem block bitmap is corrupted, we detect the corruption\\nwhile loading the bitmap and fail the allocation with error. However the\\nnext allocation from the same bitmap will notice the bitmap buffer is\\nalready loaded and tries to allocate from the bitmap with mixed results\\n(depending on the exact nature of the bitmap corruption). Fix the\\nproblem by using BH_verified bit to indicate whether the bitmap is valid\\nor not.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.282\", \"versionStartIncluding\": \"5.4.257\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.224\", \"versionStartIncluding\": \"5.10.195\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.165\", \"versionStartIncluding\": \"5.15.132\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.103\", \"versionStartIncluding\": \"6.1.53\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.44\", \"versionStartIncluding\": \"6.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.3\", \"versionStartIncluding\": \"6.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11\", \"versionStartIncluding\": \"6.3\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.14.326\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.19.295\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:52:49.858Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-42306\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:52:49.858Z\", \"dateReserved\": \"2024-07-30T07:40:12.273Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-17T09:09:11.938Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.