Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-42105— nilfs2: fix inode number range checks

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于nilfs2模块中在nilfs2的当前实现中，未检查nilfs-ns_first_ino的下限，可能导致inode号码测试宏无法正常工作。

CVSS 7.8 · High EPSS 0.26% · P17

Possible ATT&CK Techniques 1 AI

T1564.004 · NTFS File Attributes

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< 57235c3c88bb430043728d0d02f44a4efe386476 affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< 08cab183a624ba71603f3754643ae11cab34dbc4 affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< 731011ac6c37cbe97ece229fc6daa486276052c5 affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< 3be4dcc8d7bea52ea41f87aa4bbf959efe7a5987 affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< fae1959d6ab2c52677b113935e36ab4e25df37ea affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< 9194f8ca57527958bee207919458e372d638d783 affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< 1c91058425a01131ea30dda6cf43c67b17884d6a affected
8a9d2191e9f43bbcd256a9a6871bd73434c83f2f< e2fec219a36e0993642844be0f345513507031f4 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-42105

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nilfs2: fix inode number range checks
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issues related to reserved inodes". This series fixes one use-after-free issue reported by syzbot, caused by nilfs2's internal inode being exposed in the namespace on a corrupted filesystem, and a couple of flaws that cause problems if the starting number of non-reserved inodes written in the on-disk super block is intentionally (or corruptly) changed from its default value. This patch (of 3): In the current implementation of nilfs2, "nilfs->ns_first_ino", which gives the first non-reserved inode number, is read from the superblock, but its lower limit is not checked. As a result, if a number that overlaps with the inode number range of reserved inodes such as the root directory or metadata files is set in the super block parameter, the inode number test macros (NILFS_MDT_INODE and NILFS_VALID_INODE) will not function properly. In addition, these test macros use left bit-shift calculations using with the inode number as the shift count via the BIT macro, but the result of a shift calculation that exceeds the bit width of an integer is undefined in the C specification, so if "ns_first_ino" is set to a large value other than the default value NILFS_USER_INO (=11), the macros may potentially malfunction depending on the environment. Fix these issues by checking the lower bound of "nilfs->ns_first_ino" and by preventing bit shifts equal to or greater than the NILFS_USER_INO constant in the inode number test macros. Also, change the type of "ns_first_ino" from signed integer to unsigned integer to avoid the need for type casting in comparisons such as the lower bound check introduced this time.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于nilfs2模块中在nilfs2的当前实现中，未检查nilfs-ns_first_ino的下限，可能导致inode号码测试宏无法正常工作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f ~ 57235c3c88bb430043728d0d02f44a4efe386476 -
Linux Linux 2.6.30 -

II. Public POCs for CVE-2024-42105

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-42105

请登录查看更多情报信息。

Other References for CVE-2024-42105 (8)

Same Patch Batch · Linux · 2024-07-30 · 70 CVEs total

CVE-2024-42108 9.8 CRITICAL net: rswitch: Avoid use-after-free in rswitch_poll()
CVE-2024-42225 8.3 HIGH wifi: mt76: replace skb_put with skb_put_zero
CVE-2024-42120 7.8 HIGH drm/amd/display: Check pipe offset before setting vblank
CVE-2024-42117 7.8 HIGH drm/amd/display: ASSERT when failing to find index by plane/stream id
CVE-2024-42115 7.8 HIGH jffs2: Fix potential illegal address access in jffs2_free_inode
CVE-2024-42112 7.8 HIGH net: txgbe: free isb resources at the right time
CVE-2024-42111 7.8 HIGH btrfs: always do the basic checks for btrfs_qgroup_inherit structure
CVE-2024-42109 7.8 HIGH netfilter: nf_tables: unconditionally flush pending work before notifier
CVE-2024-42104 7.8 HIGH nilfs2: add missing check for inode numbers on directory entries
CVE-2024-42103 7.8 HIGH btrfs: fix adding block group to a reclaim list and the unused list during reclaim
CVE-2024-42162 7.8 HIGH gve: Account for stopped queues when reading NIC stats
CVE-2024-42099 7.8 HIGH s390/dasd: Fix invalid dereferencing of indirect CCW data pointer
CVE-2024-42133 7.6 HIGH Bluetooth: Ignore too large handle values in BIG
CVE-2024-42132 7.6 HIGH bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
CVE-2024-42110 7.5 HIGH net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
CVE-2024-42152 7.5 HIGH nvmet: fix a possible leak when destroy a ctrl during qp establishment
CVE-2024-42145 7.5 HIGH IB/core: Implement a limit on UMAD receive List
CVE-2024-42123 7.0 HIGH drm/amdgpu: fix double free err_addr pointer warnings
CVE-2024-42224 7.0 HIGH net: dsa: mv88e6xxx: Correct check for empty list
CVE-2024-42161 bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD

Showing top 20 of 70 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-42105

No comments yet

Leave a comment