Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front").
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before 62b9ad7e52d4777f7e775ee1f0ad2452f6041024; affected ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before e25cec3b76aba47a49138d2162fc809c6cd49c9e; affected ee4cdf7ba857a894ad1650d6ab77669cbbfa329e before e2d46f2ec332533816417b60933954173f602121 |
| Linux / Linux | affected 6.12; unaffected 0 before 6.12; unaffected 6.12.20 through 6.12.*; unaffected 6.13.8 through 6.13.*; unaffected 6.14 through * |
CWE
No CWE identifiers supplied.