CVE-2024-39469

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/06/2024
Last modified:
03/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors<br /> <br /> The error handling in nilfs_empty_dir() when a directory folio/page read<br /> fails is incorrect, as in the old ext2 implementation, and if the<br /> folio/page cannot be read or nilfs_check_folio() fails, it will falsely<br /> determine the directory as empty and corrupt the file system.<br /> <br /> In addition, since nilfs_empty_dir() does not immediately return on a<br /> failed folio/page read, but continues to loop, this can cause a long loop<br /> with I/O if i_size of the directory&amp;#39;s inode is also corrupted, causing the<br /> log writer thread to wait and hang, as reported by syzbot.<br /> <br /> Fix these issues by making nilfs_empty_dir() immediately return a false<br /> value (0) if it fails to get a directory folio/page.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 2.6.30 (including) 4.19.317 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.20 (including) 5.4.279 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.221 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.162 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.95 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.35 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.9.5 (excluding)
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*