Medium 5.5Published Aug 17, 2024

CVE-2024-43828ext4: fix infinite loop when replaying fast_commit

Updated under an hour ago (Oct 26, 2026, 12:40 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit When doing fast_commit replay an infinite loop may occur due to an uninitialized extent_status struct. ext4_ext_determine_insert_hole() does not detect the replay and calls ext4_es_find_extent_range(), which will return immediately without initializing the 'es' variable. Because 'es' contains garbage, an integer overflow may happen causing an infinite loop in this function, easily reproducible using fstest generic/039. This commit fixes this issue by unconditionally initializing the structure in function ext4_es_find_extent_range(). Thanks to Zhang Yi, for figuring out the real problem!

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 builds before 5ed0496e383cb6de120e56991385dce70bbb87c1; 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 builds before 0619f7750f2b178a1309808832ab20d85e0ad121; 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 builds before 181e63cd595c688194e07332f9944b3a63193de2; from 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 before c6e67df64783e99a657ef2b8c834ba2bf54c539c; 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 builds before 81f819c537d29932e4b9267f02411cbc8b355178; 8016e29f4362e285f0f7e38fadc61a5b7bdfdfa2 builds before 907c3fe532253a6ef4eb9c4d67efb71fab58c706	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.10 before 5.10.224; from 5.11 before 5.15.165; from 5.16 before 6.1.103; from 6.2 before 6.6.44; from 6.7 before 6.10.3	NVD

References

References

https://git.kernel.org/stable/c/5ed0496e383cb6de120e56991385dce70bbb87c1	patch
https://git.kernel.org/stable/c/0619f7750f2b178a1309808832ab20d85e0ad121	patch
https://git.kernel.org/stable/c/181e63cd595c688194e07332f9944b3a63193de2	patch
https://git.kernel.org/stable/c/c6e67df64783e99a657ef2b8c834ba2bf54c539c	patch
https://git.kernel.org/stable/c/81f819c537d29932e4b9267f02411cbc8b355178	patch
https://git.kernel.org/stable/c/907c3fe532253a6ef4eb9c4d67efb71fab58c706	patch
https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.