CVE-2024-47757

nilfs2: fix potential oob read in nilfs_btree_check_delete()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: May 11, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix potential oob read in nilfs_btree_check_delete()

The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before deleting a b-tree entry, causes memory access outside the block buffer when retrieving the maximum key if the root node has no entries.

This does not usually happen because b-tree mappings with 0 child nodes are never created by mkfs.nilfs2 or nilfs2 itself. However, it can happen if the b-tree root node read from a device is configured that way, so fix this potential issue by adding a check for that case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	17c76b0104e4a6513983777e1a17e0297a12b0c4 to before f3a9859767c7aea758976f5523903d247e585129Affected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before ed76d381dae125b81d09934e365391a656249da8Affected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before d20674f31626e0596ae4c1d9401dfb6739b81b58Affected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before c4f8554996e8ada3be872dfb8f60e93bcf15fb27Affected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before a8abfda768b9f33630cfbc4af6c4214f1e5681b0Affected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 257f9e5185eb6de83377caea686c306e22e871f2Affected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before a33e967b681e088a125b979975c93e3453e686cdAffected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before c4cbcc64bb31e67e02940ce060cc77f7180564cfAffected 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before f9c96351aa6718b42a9f42eaf7adce0356bdb5e8Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

17c76b0104e4a6513983777e1a17e0297a12b0c4 to before f3a9859767c7aea758976f5523903d247e585129Affected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before ed76d381dae125b81d09934e365391a656249da8Affected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before d20674f31626e0596ae4c1d9401dfb6739b81b58Affected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before c4f8554996e8ada3be872dfb8f60e93bcf15fb27Affected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before a8abfda768b9f33630cfbc4af6c4214f1e5681b0Affected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 257f9e5185eb6de83377caea686c306e22e871f2Affected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before a33e967b681e088a125b979975c93e3453e686cdAffected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before c4cbcc64bb31e67e02940ce060cc77f7180564cfAffected
17c76b0104e4a6513983777e1a17e0297a12b0c4 to before f9c96351aa6718b42a9f42eaf7adce0356bdb5e8Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.54 through 6.6.*Not affected
6.10.13 through 6.10.*Not affected
6.11.2 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.