VDB

CISA-2024-35821

CISA-2024-35821 PUBLISHED CVSS 7.5 HIGH

Reported by Linux · Published May 17, 2024

In the Linux kernel, the following vulnerability has been resolved: ubifs: Set page uptodate in the correct place Page cache reads are lockless, so setting the freshly allocated page uptodate before we've overwritten it with the data it's supposed to have in it will allow a simultaneous reader to see old data. Move the call to SetPageUptodate into ubifs_write_end(), which is after we copied the new data into the page.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
LinuxLinux1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d
LinuxLinux2.6.27, 0, 4.19.312
LinuxLinux*, 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d
linuxlinux_kernel1e51764a3c2a, 1e51764a3c2a, 1e51764a3c2a

Timeline

  • May 17, 2024 CVE Published
  • Jan 23, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›