CVE-2024-42296

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix return value of f2fs_convert_inline_inode()

If device is readonly, make f2fs_convert_inline_inode()

return EROFS instead of zero, otherwise it may trigger

panic during writeback of inline inode's dirty page as

below:

f2fs_write_single_data_page+0xbb6/0x1e90 fs/f2fs/data.c:2888

f2fs_write_cache_pages fs/f2fs/data.c:3187 [inline]

__f2fs_write_data_pages fs/f2fs/data.c:3342 [inline]

f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3369

do_writepages+0x359/0x870 mm/page-writeback.c:2634

filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:397

__filemap_fdatawrite_range mm/filemap.c:430 [inline]

file_write_and_wait_range+0x1aa/0x290 mm/filemap.c:788

f2fs_do_sync_file+0x68a/0x1ae0 fs/f2fs/file.c:276

generic_write_sync include/linux/fs.h:2806 [inline]

f2fs_file_write_iter+0x7bd/0x24e0 fs/f2fs/file.c:4977

call_write_iter include/linux/fs.h:2114 [inline]

new_sync_write fs/read_write.c:497 [inline]

vfs_wr

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References