CVE-2024-50202

nilfs2: propagate directory read errors from nilfs_find_entry()

MEDIUM
5.5
CVSS Score
Published: November 8, 2024 at 05:56 AM UTC
Updated: June 17, 2026 at 08:03 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.30 ≤ v < 4.19.3232.6.30 ≤ v < 5.10.2282.6.30 ≤ v < 5.15.1692.6.30 ≤ v < 5.4.2852.6.30 ≤ v < 6.1.1142.6.30 ≤ v < 6.11.52.6.30 ≤ v < 6.122.6.30 ≤ v < 6.6.584.20 ≤ v < 5.4.2855.11 ≤ v < 5.15.1695.16 ≤ v < 6.1.1145.5 ≤ v < 5.10.2286.2 ≤ v < 6.6.586.7 ≤ v < 6.11.52ba466d74ed74f073257f86e61519cb8f8f461846.12 rc16.12 rc26.12 rc3
Vendor states this is fixed in 08cfa12adf888db98879dbd735bc741360a34168 (fixed)
Vendor states this is fixed in 270a6f9df35fa2aea01ec23770dc9b3fc9a12989 (fixed)
Vendor states this is fixed in 9698088ac7704e260f492d9c254e29ed7dd8729a (fixed)
Vendor states this is fixed in b4b3dc9e7e604be98a222e9f941f5e93798ca475 (fixed)
Vendor states this is fixed in bb857ae1efd3138c653239ed1e7aef14e1242c81 (fixed)
Vendor states this is fixed in c1d0476885d708a932980b0f28cd90d9bd71db39 (fixed)
Vendor states this is fixed in edf8146057264191d5bfe5b91773f13d936dadd3 (fixed)
Vendor states this is fixed in efa810b15a25531cbc2f527330947b9fe16916e7 (fixed)
Vendor states this is fixed in 2.6.30 (unaffected)
Vendor states this is fixed in 4.19.323 (unaffected)
Vendor states this is fixed in 5.10.228 (unaffected)
Vendor states this is fixed in 5.15.169 (unaffected)
Vendor states this is fixed in 5.4.285 (unaffected)
Vendor states this is fixed in 6.1.114 (unaffected)
Vendor states this is fixed in 6.11.5 (unaffected)
Vendor states this is fixed in 6.12 (unaffected)
Vendor states this is fixed in 6.6.58 (unaffected)

References (10)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/08cfa12adf888db98879dbd735bc741360a34168
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/270a6f9df35fa2aea01ec23770dc9b3fc9a12989
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/9698088ac7704e260f492d9c254e29ed7dd8729a
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/b4b3dc9e7e604be98a222e9f941f5e93798ca475
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bb857ae1efd3138c653239ed1e7aef14e1242c81
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c1d0476885d708a932980b0f28cd90d9bd71db39
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/edf8146057264191d5bfe5b91773f13d936dadd3
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/efa810b15a25531cbc2f527330947b9fe16916e7

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-755

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card