CVE-2024-50230

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50230
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50230.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50230
Downstream
Related
Published
2024-11-09T10:14:40.576Z
Modified
2026-03-20T12:39:38.954219Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
nilfs2: fix kernel bug due to missing clearing of checked flag
Details

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix kernel bug due to missing clearing of checked flag

Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __blockwritebeginint(), which is called to prepare block writes, may fail the BUGON check for accesses exceeding the folio/page size, triggering a kernel bug.

This was found to be because the "checked" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that.

This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50230.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8c26c4e2694a163d525976e804d81cd955bbb40c
Fixed
994b2fa13a6c9cf3feca93090a9c337d48e3d60d
Fixed
64afad73e4623308d8943645e5631f2c7a2d7971
Fixed
aa0cee46c5d3fd9a39575a4c8a4f65f25f095b89
Fixed
f05dbebb8ee34882505d53d83af7d18f28a49248
Fixed
cd0cdb51b15203fa27d4b714be83b7dfffa0b752
Fixed
f2f1fa446676c21edb777e6d2bc4fa8f956fab68
Fixed
56c6171932a7fb267ac6cb4ff8759b93ee1d0e2e
Fixed
41e192ad2779cae0102879612dfe46726e4396aa

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50230.json"