APPLIED: [SRU][F/J/N][PATCH 0/2] CVE-2024-42160

[Stefan Bader]

On 23.08.24 14:20, Massimiliano Pellizzer wrote:
> [Impact]
> 
> f2fs: check validation of fault attrs in f2fs_build_fault_attr()
> 
> - It missed to check validation of fault attrs in parse_options(),
> let's fix to add check condition in f2fs_build_fault_attr().
> - Use f2fs_build_fault_attr() in __sbi_store() to clean up code.
> 
> [Fix]
> 
> Noble:  Clean cherry pick from linux-6.9.y
> Jammy:  Backported from linux-6.1.y solving merge conflicts due to the usage of a macro
> Focal:  Backported from linux-6.1.y solving merge conflicts due to the usage of a macro
> Bionic: In progress
> Xenial: Not affected
> 
> The patch series, include also a patch which fixes a
> bug introduced by the fix commit of CVE-2024-42160.
> 
> [Test Cases]
> 
> Compile and boot tested.
> 
> [Where problems could occur]
> 
> The fix affects the F2FS file system implementation. An issue with this
> fix may lead to kernel crashes, particularly during file system
> operations on F2FS formatted partitions. Users may also notice data
> corruption or unexpected read/write failures when interacting with a
> devices using the F2FS file system.
> 
> Chao Yu (1):
>    f2fs: check validation of fault attrs in f2fs_build_fault_attr()
> 
>   fs/f2fs/f2fs.h  | 12 ++++++++----
>   fs/f2fs/super.c | 27 ++++++++++++++++++++-------
>   fs/f2fs/sysfs.c | 14 ++++++++++----
>   3 files changed, 38 insertions(+), 15 deletions(-)
> 

Applied to noble,jammy,focal:linux/master-next. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xE8675DEECBEECEA3.asc
Type: application/pgp-keys
Size: 48643 bytes
Desc: OpenPGP public key
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240830/deb1abd1/attachment-0001.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20240830/deb1abd1/attachment-0001.sig>