CVE-2024-50230

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __block_write_begin_int(), which is called to prepare block writes, may fail the BUG_ON check for accesses exceeding the folio/page size, triggering a kernel bug. This was found to be because the "checked" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that. This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.

Reserved 2024-10-21 | Published 2024-11-09 | Updated 2024-11-19 | Assigner Linux

Product status

Default status
unaffected

8c26c4e2694a before 994b2fa13a6c
affected

8c26c4e2694a before 64afad73e462
affected

8c26c4e2694a before aa0cee46c5d3
affected

8c26c4e2694a before f05dbebb8ee3
affected

8c26c4e2694a before cd0cdb51b152
affected

8c26c4e2694a before f2f1fa446676
affected

8c26c4e2694a before 56c6171932a7
affected

8c26c4e2694a before 41e192ad2779
affected

Default status
affected

3.10
affected

Any version before 3.10
unaffected

4.19.323
unaffected

5.4.285
unaffected

5.10.229
unaffected

5.15.171
unaffected

6.1.116
unaffected

6.6.60
unaffected

6.11.7
unaffected

6.12
unaffected

References

git.kernel.org/...c/994b2fa13a6c9cf3feca93090a9c337d48e3d60d

git.kernel.org/...c/64afad73e4623308d8943645e5631f2c7a2d7971

git.kernel.org/...c/aa0cee46c5d3fd9a39575a4c8a4f65f25f095b89

git.kernel.org/...c/f05dbebb8ee34882505d53d83af7d18f28a49248

git.kernel.org/...c/cd0cdb51b15203fa27d4b714be83b7dfffa0b752

git.kernel.org/...c/f2f1fa446676c21edb777e6d2bc4fa8f956fab68

git.kernel.org/...c/56c6171932a7fb267ac6cb4ff8759b93ee1d0e2e

git.kernel.org/...c/41e192ad2779cae0102879612dfe46726e4396aa

cve.org (CVE-2024-50230)

nvd.nist.gov (CVE-2024-50230)

Download JSON