{"id":"DEBIAN-CVE-2024-42296","details":"In the Linux kernel, the following vulnerability has been resolved:  f2fs: fix return value of f2fs_convert_inline_inode()  If device is readonly, make f2fs_convert_inline_inode() return EROFS instead of zero, otherwise it may trigger panic during writeback of inline inode's dirty page as below:   f2fs_write_single_data_page+0xbb6/0x1e90 fs/f2fs/data.c:2888  f2fs_write_cache_pages fs/f2fs/data.c:3187 [inline]  __f2fs_write_data_pages fs/f2fs/data.c:3342 [inline]  f2fs_write_data_pages+0x1efe/0x3a90 fs/f2fs/data.c:3369  do_writepages+0x359/0x870 mm/page-writeback.c:2634  filemap_fdatawrite_wbc+0x125/0x180 mm/filemap.c:397  __filemap_fdatawrite_range mm/filemap.c:430 [inline]  file_write_and_wait_range+0x1aa/0x290 mm/filemap.c:788  f2fs_do_sync_file+0x68a/0x1ae0 fs/f2fs/file.c:276  generic_write_sync include/linux/fs.h:2806 [inline]  f2fs_file_write_iter+0x7bd/0x24e0 fs/f2fs/file.c:4977  call_write_iter include/linux/fs.h:2114 [inline]  new_sync_write fs/read_write.c:497 [inline]  vfs_write+0xa72/0xc90 fs/read_write.c:590  ksys_write+0x1a0/0x2c0 fs/read_write.c:643  do_syscall_x64 arch/x86/entry/common.c:52 [inline]  do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83  entry_SYSCALL_64_after_hwframe+0x77/0x7f","modified":"2026-09-15T09:03:10.411948180Z","published":"2024-08-17T09:15:10.080Z","upstream":["CVE-2024-42296"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-42296"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.106-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-42296.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-42296.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.10.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-42296.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}