NetSight
IP …
high7.8

CVE-2024-41034

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug on rename operation of broken directory Syzbot reported that in rena…

Impact

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug on rename operation of broken directory Syzbot reported that in rename directory operation on broken directory on nilfs2, __block_write_begin_int() called to prepare block write may fail BUG_ON check for access exceeding the folio/page size. This is because nilfs_dotdot(), which gets parent directory reference entry ("..") of the directory to be moved or renamed, does not check consistency enough, and may return location exceeding folio/page size for broken directories. Fix this issue by checking required directory entries ("." and "..") in the first chunk of the directory in nilfs_dotdot().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.30 before 4.19.318
from 4.20 before 5.4.280
from 5.5 before 5.10.222
from 5.11 before 5.15.163
from 5.16 before 6.1.100
from 6.2 before 6.6.41

References