Riskcovery

CVE-2024-46780

nilfs2: protect references to superblock parameters exposed in sysfs

State
Published
Severity
7.8 High
Published
Sep 18, 2024
Updated
Aug 5, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: protect references to superblock parameters exposed in sysfs

The superblock buffers of nilfs2 can not only be overwritten at runtime for modifications/repairs, but they are also regularly swapped, replaced during resizing, and even abandoned when degrading to one side due to backing device issues. So, accessing them requires mutual exclusion using the reader/writer semaphore "nilfs->ns_sem".

Some sysfs attribute show methods read this superblock buffer without the necessary mutual exclusion, which can cause problems with pointer dereferencing and memory access, so fix it.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • da7141fb78db915680616e15677539fc8140cf53 to before b90beafac05931cbfcb6b1bd4f67c1923f47040eAffected
  • da7141fb78db915680616e15677539fc8140cf53 to before ba97ba173f9625d5f34a986088979eae8b80d38eAffected
  • da7141fb78db915680616e15677539fc8140cf53 to before 157c0d94b4c40887329418c70ef4edd1a8d6b4edAffected
  • da7141fb78db915680616e15677539fc8140cf53 to before b14e7260bb691d7f563f61da07d61e3c8b59a614Affected
  • da7141fb78db915680616e15677539fc8140cf53 to before 19cfeba0e4b8eda51484fcf8cf7d150418e1d880Affected
  • da7141fb78db915680616e15677539fc8140cf53 to before 8c6e43b3d5f109cf9c61bc188fcc8175404e924fAffected
  • da7141fb78db915680616e15677539fc8140cf53 to before 962562d4c70c5cdeb4e955d63ff2017c4eca1aadAffected
  • da7141fb78db915680616e15677539fc8140cf53 to before 683408258917541bdb294cd717c210a04381931eAffected
LinuxLinux
  • 3.17Affected
  • before 3.17Not affected
  • 4.19.322 through 4.19.*Not affected
  • 5.4.284 through 5.4.*Not affected
  • 5.10.226 through 5.10.*Not affected
  • 5.15.167 through 5.15.*Not affected
  • 6.1.110 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.