Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-50202— nilfs2: propagate directory read errors from nilfs_find_entry()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于存在目录读取错误传播问题。

AI Predicted 4.4 Difficulty: Easy EPSS 0.23% · P13

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 2ba466d74ed74f073257f86e61519cb8f8f46184< bb857ae1efd3138c653239ed1e7aef14e1242c81 affected
2ba466d74ed74f073257f86e61519cb8f8f46184< b4b3dc9e7e604be98a222e9f941f5e93798ca475 affected
2ba466d74ed74f073257f86e61519cb8f8f46184< c1d0476885d708a932980b0f28cd90d9bd71db39 affected
2ba466d74ed74f073257f86e61519cb8f8f46184< edf8146057264191d5bfe5b91773f13d936dadd3 affected
2ba466d74ed74f073257f86e61519cb8f8f46184< 270a6f9df35fa2aea01ec23770dc9b3fc9a12989 affected
2ba466d74ed74f073257f86e61519cb8f8f46184< 9698088ac7704e260f492d9c254e29ed7dd8729a affected
2ba466d74ed74f073257f86e61519cb8f8f46184< efa810b15a25531cbc2f527330947b9fe16916e7 affected
2ba466d74ed74f073257f86e61519cb8f8f46184< 08cfa12adf888db98879dbd735bc741360a34168 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-50202

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nilfs2: propagate directory read errors from nilfs_find_entry()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于存在目录读取错误传播问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 2ba466d74ed74f073257f86e61519cb8f8f46184 ~ bb857ae1efd3138c653239ed1e7aef14e1242c81 -
Linux Linux 2.6.30 -

II. Public POCs for CVE-2024-50202

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50202

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-50202 (5)

Same Patch Batch · Linux · 2024-11-08 · 38 CVEs total

CVE-2024-50206 9.8 CRITICAL net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
CVE-2024-50185 8.2 HIGH mptcp: handle consistently DSS corruption
CVE-2024-50174 7.8 HIGH drm/panthor: Fix race when converting group handle to group object
CVE-2024-50211 7.8 HIGH udf: refactor inode_bmap() to handle error
CVE-2024-50208 7.8 HIGH RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
CVE-2024-50207 7.8 HIGH ring-buffer: Fix reader locking when changing the sub buffer order
CVE-2024-50203 7.8 HIGH bpf, arm64: Fix address emission with tag-based KASAN enabled
CVE-2024-50200 7.8 HIGH maple_tree: correct tree corruption on spanning store
CVE-2024-50189 7.8 HIGH HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
CVE-2024-50188 7.8 HIGH net: phy: dp83869: fix memory corruption when enabling fiber
CVE-2024-50187 7.8 HIGH drm/vc4: Stop the active perfmon before being destroyed
CVE-2024-50186 7.8 HIGH net: explicitly clear the sk pointer, when pf->create fails
CVE-2024-50173 7.8 HIGH drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
CVE-2024-50175 7.8 HIGH media: qcom: camss: Remove use_count guard in stop_streaming
CVE-2024-50182 7.1 HIGH secretmem: disable memfd_secret() if arch cannot set direct map
CVE-2024-50195 7.1 HIGH posix-clock: Fix missing timespec64 check in pc_clock_settime()
CVE-2024-50198 iio: light: veml6030: fix IIO device retrieval from embedded device
CVE-2024-50210 posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
CVE-2024-50176 remoteproc: k3-r5: Fix error handling when power-up failed
CVE-2024-50209 RDMA/bnxt_re: Add a check for memory allocation

Showing top 20 of 38 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-50202

No comments yet

Leave a comment