What is CVE-2024-42160?

CVE-2024-42160 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10, affecting Linux kernel versions from 3.8 onward and patched in 5.15.181, 6.1.98, 6.6.39 and others. CVE-2024-42160 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2024-42160?

CVE-2024-42160 has a CVSS score of 7.8 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Is there a patch available for CVE-2024-42160?

Yes, CVE-2024-42160 has been patched. Fixed versions include 5.15.181, 6.1.98, 6.6.39 and others. If you are running Linux kernel 3.8 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2024-42160 actively exploited?

CVE-2024-42160 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2024-42160

High

In the Linux kernel, the following vulnerability has been resolved: f2fs: check validation of fault attrs in f2fs_build_fault_attr() - It missed to check validation of fault attrs in parse_options(), let's fix to add check condition in f2fs_build_fault_attr(). - Use f2fs_build_fault_attr() in __sbi_store() to clean up code.

Package Linux Kernel

Published 2024-07-30

Last modified 2026-03-25

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.8

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type

CWE-754

CVE-2024-42160 is classified as CWE-754

See CWE-754 on MITRE CWE for full details on this weakness type.

Affected versions

Linux kernel versions 3.8 and later are affected. Fixed in 5.15.181, 6.1.98, 6.6.39, 6.9.9, 6.10 and their respective stable series.

Affected from

≥ 3.8

Fixed in

✓ 5.15.181 5.15.x ✓ 6.1.98 6.1.x ✓ 6.6.39 6.6.x ✓ 6.9.9 6.9.x ✓ 6.10

References

6 total

Kernel Git
https://git.kernel.org/stable/c/44958ca9e400f57bd0478115519ffc350fcee61e

Patch
Kernel Git
https://git.kernel.org/stable/c/4ed886b187f47447ad559619c48c086f432d2b77

Patch
Kernel Git
https://git.kernel.org/stable/c/6e5b601706ce05d94338cad598736d96bb8096c8

Patch
Kernel Git
https://git.kernel.org/stable/c/bc84dd2c33e0c10fd90d60f0cfc0bfb504d4692d

Patch
Kernel Git
https://git.kernel.org/stable/c/ecb641f424d6d1f055d149a15b892edcc92c504b

Patch

Showing 5 of 6 references View all on NVD

Details

CVE ID CVE-2024-42160

Severity High

CVSS score 7.8 / 10

CVSS version 3.1

Published 2024-07-30

Modified 2026-03-25

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2024-42160?

CVE-2024-42160 is a High severity Linux kernel vulnerability with a CVSS score of 7.8 out of 10 . It affects Linux kernel versions from 3.8 onward and has been patched in 5.15.181, 6.1.98, 6.6.39 and others. CVE-2024-42160 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2024-42160?

CVE-2024-42160 has a CVSS score of 7.8 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Is there a patch available for CVE-2024-42160?

Yes. CVE-2024-42160 has been patched. Fixed versions include 5.15.181, 6.1.98, 6.6.39 and others. If you are running Linux kernel 3.8 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2024-42160 actively exploited?

No. CVE-2024-42160 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.