CVE-2024-50202

nilfs2: propagate directory read errors from nilfs_find_entry()

State
Published
Severity
5.5 Medium
Published
Nov 8, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: propagate directory read errors from nilfs_find_entry()

Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2.

The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails.

If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts.

Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry().

The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-755 Improper Handling of Exceptional Conditions

Affected Products

ProductVersions
LinuxLinux
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before bb857ae1efd3138c653239ed1e7aef14e1242c81Affected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before b4b3dc9e7e604be98a222e9f941f5e93798ca475Affected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before c1d0476885d708a932980b0f28cd90d9bd71db39Affected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before edf8146057264191d5bfe5b91773f13d936dadd3Affected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 270a6f9df35fa2aea01ec23770dc9b3fc9a12989Affected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 9698088ac7704e260f492d9c254e29ed7dd8729aAffected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before efa810b15a25531cbc2f527330947b9fe16916e7Affected
  • 2ba466d74ed74f073257f86e61519cb8f8f46184 to before 08cfa12adf888db98879dbd735bc741360a34168Affected
LinuxLinux
  • 2.6.30Affected
  • before 2.6.30Not affected
  • 4.19.323 through 4.19.*Not affected
  • 5.4.285 through 5.4.*Not affected
  • 5.10.228 through 5.10.*Not affected
  • 5.15.169 through 5.15.*Not affected
  • 6.1.114 through 6.1.*Not affected
  • 6.6.58 through 6.6.*Not affected
  • 6.11.5 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.