Executive Summary

Informations
Name CVE-2024-46781 First vendor Publication 2024-09-18
Vendor Cve Last vendor Modification 2024-09-23

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix missing cleanup on rollforward recovery error

In an error injection test of a routine for mount-time recovery, KASAN found a use-after-free bug.

It turned out that if data recovery was performed using partial logs created by dsync writes, but an error occurred before starting the log writer to create a recovered checkpoint, the inodes whose data had been recovered were left in the ns_dirty_files list of the nilfs object and were not freed.

Fix this issue by cleaning up inodes that have read the recovery data if the recovery routine fails midway before the log writer starts.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46781

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-416 Use After Free

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3653

Sources (Detail)

https://git.kernel.org/stable/c/07e4dc2fe000ab008bcfe90be4324ef56b5b4355
https://git.kernel.org/stable/c/1cf1f7e8cd47244fa947d357ef1f642d91e219a3
https://git.kernel.org/stable/c/35a9a7a7d94662146396199b0cfd95f9517cdd14
https://git.kernel.org/stable/c/5787fcaab9eb5930f5378d6a1dd03d916d146622
https://git.kernel.org/stable/c/8e2d1e9d93c4ec51354229361ac3373058529ec4
https://git.kernel.org/stable/c/9d8c3a585d564d776ee60d4aabec59b404be7403
https://git.kernel.org/stable/c/ca92c4bff2833cb30d493b935168d6cccd5c805d
https://git.kernel.org/stable/c/da02f9eb333333b2e4f25d2a14967cff785ac82e
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2025-01-08 03:05:22
  • Multiple Updates
2025-01-07 03:04:55
  • Multiple Updates
2024-12-25 03:03:33
  • Multiple Updates
2024-12-12 03:06:29
  • Multiple Updates
2024-11-23 03:03:28
  • Multiple Updates
2024-11-22 03:01:37
  • Multiple Updates
2024-11-20 02:59:57
  • Multiple Updates
2024-11-14 03:00:16
  • Multiple Updates
2024-11-09 03:00:16
  • Multiple Updates
2024-10-26 02:57:38
  • Multiple Updates
2024-10-25 02:59:31
  • Multiple Updates
2024-10-23 02:58:42
  • Multiple Updates
2024-10-03 02:53:52
  • Multiple Updates
2024-10-02 00:27:48
  • Multiple Updates
2024-09-23 21:27:29
  • Multiple Updates
2024-09-20 17:27:28
  • Multiple Updates
2024-09-18 13:27:29
  • First insertion