CVE-2024-43854
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
block: initialize integrity buffer to zero before writing it to media
In the Linux kernel, the following vulnerability has been resolved: block: initialize integrity buffer to zero before writing it to media Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory. Fix this by adding the __GFP_ZERO flag to allocations for writes.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | 9f4af4cf08f9a0329ade3d938f55d2220c40d0a6 | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | 129f95948a96105c1fad8e612c9097763e88ac5f | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | 3fd11fe4f20756b4c0847f755a64cd96f8c6a005 | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | cf6b45ea7a8df0f61bded1dc4a8561ac6ad143d2 | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | d418313bd8f55c079a7da12651951b489a638ac1 | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | 23a19655fb56f241e592041156dfb1c6d04da644 | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | ebc0e91ba76dc6544fff9f5b66408b1982806a00 | Unavailable | None listed |
| 7ba1ba12eeef0aa7113beb16410ef8b7c748e18b | affected | git | 899ee2c3829c5ac14bfc7d3c4a5846c0b709b78f | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.27 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.27 | Unavailable | None listed |
| 4.19.322 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.284 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.226 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.165 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.103 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.44 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.10.3 | unaffected | semver | Unavailable | 6.10.* | None listed |
| 6.11 | unaffected | original_commit_for_fix | Unavailable | * | None listed |