01 Record

CVE-2024-42273

f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.23% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 14.0% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-08-04.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-08-17 08:54Z2 YR AGO

Last updated

2026-08-05 11:36Z1 MO AGO

Reserved

2024-07-30

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base

Data version

5.2

Document digest

87b4f83fc26a1d2517bd67d0b9665a05c9f200156463cd875c921b5fc30b2274

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7c972c89457511007dfc933814c06786905e515c to < 5fd057160ab240dd816ae09b625395d54c297de1, 417b8a91f4e8831cadaf85c3f15c6991c1f54dde to < 4239571c5db46a42f723b8fa8394039187c34439, 4961acdd65c956e97c1a000c82d91a8c1cdbe44b to < 0cd106612396656d6f1ca17ef192c6759bb60791, 4961acdd65c956e97c1a000c82d91a8c1cdbe44b to < 8cb1f4080dd91c6e6b01dbea013a3f42341cb6a1, 7ea0f29d9fd84905051be020c0df7d557e286136, b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3, 6.1.77 to < 6.1.104, 6.6.16 to < 6.6.45, 5.15.149 to < 5.16, 6.7.4 to < 6.8, 6.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/5fd057160ab240dd816ae09b625395d54c297de1
git.kernel.orghttps://git.kernel.org/stable/c/4239571c5db46a42f723b8fa8394039187c34439
git.kernel.orghttps://git.kernel.org/stable/c/0cd106612396656d6f1ca17ef192c6759bb60791
git.kernel.orghttps://git.kernel.org/stable/c/8cb1f4080dd91c6e6b01dbea013a3f42341cb6a1
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/01/msg00001.html

01 Record index

CVE-2024-42273

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-42273

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References