Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%

CVE-2024-50230— nilfs2: fix kernel bug due to missing clearing of checked flag

EPSS 0.01% · P2

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinux8c26c4e2694a163d525976e804d81cd955bbb40c< 994b2fa13a6c9cf3feca93090a9c337d48e3d60daffected
8c26c4e2694a163d525976e804d81cd955bbb40c< 64afad73e4623308d8943645e5631f2c7a2d7971affected
8c26c4e2694a163d525976e804d81cd955bbb40c< aa0cee46c5d3fd9a39575a4c8a4f65f25f095b89affected
8c26c4e2694a163d525976e804d81cd955bbb40c< f05dbebb8ee34882505d53d83af7d18f28a49248affected
8c26c4e2694a163d525976e804d81cd955bbb40c< cd0cdb51b15203fa27d4b714be83b7dfffa0b752affected
8c26c4e2694a163d525976e804d81cd955bbb40c< f2f1fa446676c21edb777e6d2bc4fa8f956fab68affected
8c26c4e2694a163d525976e804d81cd955bbb40c< 56c6171932a7fb267ac6cb4ff8759b93ee1d0e2eaffected
8c26c4e2694a163d525976e804d81cd955bbb40c< 41e192ad2779cae0102879612dfe46726e4396aaaffected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-50230

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nilfs2: fix kernel bug due to missing clearing of checked flag
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __block_write_begin_int(), which is called to prepare block writes, may fail the BUG_ON check for accesses exceeding the folio/page size, triggering a kernel bug. This was found to be because the "checked" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that. This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于缺少清除checked标志而导致内核错误。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 8c26c4e2694a163d525976e804d81cd955bbb40c ~ 994b2fa13a6c9cf3feca93090a9c337d48e3d60d -
LinuxLinux 3.10 -

II. Public POCs for CVE-2024-50230

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50230

登录查看更多情报信息。

Same Patch Batch · Linux · 2024-11-09 · 49 CVEs total

CVE-2024-50249ACPI: CPPC: Make rmw_lock a raw_spin_lock
CVE-2024-50252mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
CVE-2024-50254bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
CVE-2024-50258net: fix crash when config small gso_max_size/gso_ipv4_max_size
CVE-2024-50259netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write
CVE-2024-50260sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
CVE-2024-50261macsec: Fix use-after-free while sending the offloading packet
CVE-2024-50262bpf: Fix out-of-bounds write in trie_get_next_key()
CVE-2024-50257netfilter: Fix use-after-free in get_info()
CVE-2024-50250fsdax: dax_unshare_iter needs to copy entire blocks
CVE-2024-50251netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
CVE-2024-50248ntfs3: Add bounds checking to mi_enum_attr()
CVE-2024-50247fs/ntfs3: Check if more than chunk-size bytes are written
CVE-2024-50246fs/ntfs3: Add rough attr alloc_size check
CVE-2024-50244fs/ntfs3: Additional check in ni_clear()
CVE-2024-50245fs/ntfs3: Fix possible deadlock in mi_read
CVE-2024-50243fs/ntfs3: Fix general protection fault in run_is_mapped_full
CVE-2024-50242fs/ntfs3: Additional check in ntfs_file_release
CVE-2024-50241NFSD: Initialize struct nfsd4_copy earlier
CVE-2024-50240phy: qcom: qmp-usb: fix NULL-deref on runtime suspend

Showing top 20 of 49 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2024-50230

No comments yet


Leave a comment