CVE-2024-47680

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: check discard support for conventional zones

As the helper function f2fs_bdev_support_discard() shows, f2fs checks if

the target block devices support discard by calling

bdev_max_discard_sectors() and bdev_is_zoned(). This check works well

for most cases, but it does not work for conventional zones on zoned

block devices. F2fs assumes that zoned block devices support discard,

and calls __submit_discard_cmd(). When __submit_discard_cmd() is called

for sequential write required zones, it works fine since

__submit_discard_cmd() issues zone reset commands instead of discard

commands. However, when __submit_discard_cmd() is called for

conventional zones, __blkdev_issue_discard() is called even when the

devices do not support discard.

The inappropriate __blkdev_issue_discard() call was not a problem before

the commit 30f1e7241422 ("block: move discard checks into the ioctl

handler") because __blkdev_issue_discard()

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References