CVE-2024-39469

nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors

State: Published
Severity: 7.1 High
Published: Jun 25, 2024
Updated: Oct 15, 2026
Reserved: Jun 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors

The error handling in nilfs_empty_dir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or nilfs_check_folio() fails, it will falsely determine the directory as empty and corrupt the file system.

In addition, since nilfs_empty_dir() does not immediately return on a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the directory's inode is also corrupted, causing the log writer thread to wait and hang, as reported by syzbot.

Fix these issues by making nilfs_empty_dir() immediately return a false value (0) if it fails to get a directory folio/page.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2ba466d74ed74f073257f86e61519cb8f8f46184 to before 2ac8a2fe22bdde9eecce2a42cf5cab79333fb428Affected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 405b71f1251e5ae865f53bd27c45114e6c83bee3Affected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before c77ad608df6c091fe64ecb91f41ef7cb465587f1Affected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 11a2edb70356a2202dcb7c9c189c8356ab4752cdAffected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 129dcd3e7d036218db3f59c82d82004b9539ed82Affected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before d18b05eda7fa77f02114f15b02c009f28ee42346Affected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 59f14875a96ef93f05b82ad3c980605f2cb444b5Affected 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 7373a51e7998b508af7136530f3a997b286ce81cAffected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.19.317 through 4.19.Not affected 5.4.279 through 5.4.Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.95 through 6.1.Not affected 6.6.35 through 6.6.Not affected 6.9.5 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

2ba466d74ed74f073257f86e61519cb8f8f46184 to before 2ac8a2fe22bdde9eecce2a42cf5cab79333fb428Affected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before 405b71f1251e5ae865f53bd27c45114e6c83bee3Affected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before c77ad608df6c091fe64ecb91f41ef7cb465587f1Affected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before 11a2edb70356a2202dcb7c9c189c8356ab4752cdAffected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before 129dcd3e7d036218db3f59c82d82004b9539ed82Affected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before d18b05eda7fa77f02114f15b02c009f28ee42346Affected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before 59f14875a96ef93f05b82ad3c980605f2cb444b5Affected
2ba466d74ed74f073257f86e61519cb8f8f46184 to before 7373a51e7998b508af7136530f3a997b286ce81cAffected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.19.317 through 4.19.*Not affected
5.4.279 through 5.4.*Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.95 through 6.1.*Not affected
6.6.35 through 6.6.*Not affected
6.9.5 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.