CVE-2024-50202— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 18
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 2ba466d74ed74f073257f86e61519cb8f8f46184< bb857ae1efd3138c653239ed1e7aef14e1242c81 | affected |
2ba466d74ed74f073257f86e61519cb8f8f46184< b4b3dc9e7e604be98a222e9f941f5e93798ca475 | affected | ||
2ba466d74ed74f073257f86e61519cb8f8f46184< c1d0476885d708a932980b0f28cd90d9bd71db39 | affected | ||
2ba466d74ed74f073257f86e61519cb8f8f46184< edf8146057264191d5bfe5b91773f13d936dadd3 | affected | ||
2ba466d74ed74f073257f86e61519cb8f8f46184< 270a6f9df35fa2aea01ec23770dc9b3fc9a12989 | affected | ||
2ba466d74ed74f073257f86e61519cb8f8f46184< 9698088ac7704e260f492d9c254e29ed7dd8729a | affected | ||
2ba466d74ed74f073257f86e61519cb8f8f46184< efa810b15a25531cbc2f527330947b9fe16916e7 | affected | ||
2ba466d74ed74f073257f86e61519cb8f8f46184< 08cfa12adf888db98879dbd735bc741360a34168 | affected | ||
| … +10 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-50202の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
nilfs2: propagate directory read errors from nilfs_find_entry()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于存在目录读取错误传播问题。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2024-50202の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-50202のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-50202 补丁与修复 (5)
Same Patch Batch · Linux · 2024-11-08 · 38 CVEs total
| CVE-2024-50203 | bpf, arm64: Fix address emission with tag-based KASAN enabled | |
| CVE-2024-50193 | x86/entry_32: Clear CPU buffers after register restore in NMI return | |
| CVE-2024-50194 | arm64: probes: Fix uprobes for big-endian kernels | |
| CVE-2024-50195 | posix-clock: Fix missing timespec64 check in pc_clock_settime() | |
| CVE-2024-50196 | pinctrl: ocelot: fix system hang on level based interrupts | |
| CVE-2024-50197 | pinctrl: intel: platform: fix error path in device_for_each_child_node() | |
| CVE-2024-50198 | iio: light: veml6030: fix IIO device retrieval from embedded device | |
| CVE-2024-50199 | mm/swapfile: skip HugeTLB pages for unuse_vma | |
| CVE-2024-50200 | maple_tree: correct tree corruption on spanning store | |
| CVE-2024-50201 | drm/radeon: Fix encoder->possible_clones | |
| CVE-2024-50192 | irqchip/gic-v4: Don't allow a VMOVP on a dying VPE | |
| CVE-2024-50204 | fs: don't try and remove empty rbtree node | |
| CVE-2024-50205 | ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() | |
| CVE-2024-50206 | net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init | |
| CVE-2024-50207 | ring-buffer: Fix reader locking when changing the sub buffer order | |
| CVE-2024-50209 | RDMA/bnxt_re: Add a check for memory allocation | |
| CVE-2024-50208 | RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages | |
| CVE-2024-50210 | posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() | |
| CVE-2024-50211 | udf: refactor inode_bmap() to handle error | |
| CVE-2024-50183 | scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance |
Showing 20 of 38 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2022-4994
KVM: x86: wean fast IN from emulator_pio_in - CVE-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() ra - CVE-2026-64559
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl - CVE-2026-64558
s390/pkey: Check length in pkey_pckmo handler implementation - CVE-2026-64556
perf/core: Detach event groups during remove_on_exec
同じベンダー: Linux
- CVE-2022-4994
KVM: x86: wean fast IN from emulator_pio_in - CVE-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() ra - CVE-2026-64559
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl - CVE-2026-64558
s390/pkey: Check length in pkey_pckmo handler implementation - CVE-2026-64556
perf/core: Detach event groups during remove_on_exec
V. CVE-2024-50202へのコメント
まだコメントはありません