CVE-2024-50230

nilfs2: fix kernel bug due to missing clearing of checked flag

State: Published
Severity: 7.8 High
Published: Nov 9, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix kernel bug due to missing clearing of checked flag

Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __block_write_begin_int(), which is called to prepare block writes, may fail the BUG_ON check for accesses exceeding the folio/page size, triggering a kernel bug.

This was found to be because the "checked" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that.

This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	8c26c4e2694a163d525976e804d81cd955bbb40c to before 994b2fa13a6c9cf3feca93090a9c337d48e3d60dAffected 8c26c4e2694a163d525976e804d81cd955bbb40c to before 64afad73e4623308d8943645e5631f2c7a2d7971Affected 8c26c4e2694a163d525976e804d81cd955bbb40c to before aa0cee46c5d3fd9a39575a4c8a4f65f25f095b89Affected 8c26c4e2694a163d525976e804d81cd955bbb40c to before f05dbebb8ee34882505d53d83af7d18f28a49248Affected 8c26c4e2694a163d525976e804d81cd955bbb40c to before cd0cdb51b15203fa27d4b714be83b7dfffa0b752Affected 8c26c4e2694a163d525976e804d81cd955bbb40c to before f2f1fa446676c21edb777e6d2bc4fa8f956fab68Affected 8c26c4e2694a163d525976e804d81cd955bbb40c to before 56c6171932a7fb267ac6cb4ff8759b93ee1d0e2eAffected 8c26c4e2694a163d525976e804d81cd955bbb40c to before 41e192ad2779cae0102879612dfe46726e4396aaAffected
LinuxLinux	3.10Affected before 3.10Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.171 through 5.15.Not affected 6.1.116 through 6.1.Not affected 6.6.60 through 6.6.Not affected 6.11.7 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

8c26c4e2694a163d525976e804d81cd955bbb40c to before 994b2fa13a6c9cf3feca93090a9c337d48e3d60dAffected
8c26c4e2694a163d525976e804d81cd955bbb40c to before 64afad73e4623308d8943645e5631f2c7a2d7971Affected
8c26c4e2694a163d525976e804d81cd955bbb40c to before aa0cee46c5d3fd9a39575a4c8a4f65f25f095b89Affected
8c26c4e2694a163d525976e804d81cd955bbb40c to before f05dbebb8ee34882505d53d83af7d18f28a49248Affected
8c26c4e2694a163d525976e804d81cd955bbb40c to before cd0cdb51b15203fa27d4b714be83b7dfffa0b752Affected
8c26c4e2694a163d525976e804d81cd955bbb40c to before f2f1fa446676c21edb777e6d2bc4fa8f956fab68Affected
8c26c4e2694a163d525976e804d81cd955bbb40c to before 56c6171932a7fb267ac6cb4ff8759b93ee1d0e2eAffected
8c26c4e2694a163d525976e804d81cd955bbb40c to before 41e192ad2779cae0102879612dfe46726e4396aaAffected

LinuxLinux

3.10Affected
before 3.10Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.171 through 5.15.*Not affected
6.1.116 through 6.1.*Not affected
6.6.60 through 6.6.*Not affected
6.11.7 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.