Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-50229— nilfs2: fix potential deadlock with newly created symlinks

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于新创建的符号链接存在死锁问题。

AI Predicted 7.8 Difficulty: Hard EPSS 0.21% · P10

Possible ATT&CK Techniques 1 AI

T1496 · Resource Hijacking

Affected Version Matrix 20

VendorProduct Version RangeStatus
Linux Linux 21fc61c73c3903c4c312d0802da01ec2b323d174< cc38c596e648575ce58bfc31623a6506eda4b94a affected
21fc61c73c3903c4c312d0802da01ec2b323d174< a1686db1e59f8fc016c4c9361e2119dd206f479a affected
21fc61c73c3903c4c312d0802da01ec2b323d174< c72e0df0b56c1166736dc8eb62070ebb12591447 affected
21fc61c73c3903c4c312d0802da01ec2b323d174< 69548bb663fcb63f9ee0301be808a36b9d78dac3 affected
21fc61c73c3903c4c312d0802da01ec2b323d174< 58c7f44c7b9e5ac7e3b1e5da2572ed7767a12f38 affected
21fc61c73c3903c4c312d0802da01ec2b323d174< 1246d86e7bbde265761932c6e2dce28c69cdcb91 affected
21fc61c73c3903c4c312d0802da01ec2b323d174< 9aa5d43ac4cace8fb9bd964ff6c23f599dc3cd24 affected
21fc61c73c3903c4c312d0802da01ec2b323d174< b3a033e3ecd3471248d474ef263aadc0059e516a affected
… +12 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-50229

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nilfs2: fix potential deadlock with newly created symlinks
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential deadlock with newly created symlinks Syzbot reported that page_symlink(), called by nilfs_symlink(), triggers memory reclamation involving the filesystem layer, which can result in circular lock dependencies among the reader/writer semaphore nilfs->ns_segctor_sem, s_writers percpu_rwsem (intwrite) and the fs_reclaim pseudo lock. This is because after commit 21fc61c73c39 ("don't put symlink bodies in pagecache into highmem"), the gfp flags of the page cache for symbolic links are overwritten to GFP_KERNEL via inode_nohighmem(). This is not a problem for symlinks read from the backing device, because the __GFP_FS flag is dropped after inode_nohighmem() is called. However, when a new symlink is created with nilfs_symlink(), the gfp flags remain overwritten to GFP_KERNEL. Then, memory allocation called from page_symlink() etc. triggers memory reclamation including the FS layer, which may call nilfs_evict_inode() or nilfs_dirty_inode(). And these can cause a deadlock if they are called while nilfs->ns_segctor_sem is held: Fix this issue by dropping the __GFP_FS flag from the page cache GFP flags of newly created symlinks in the same way that nilfs_new_inode() and __nilfs_read_inode() do, as a workaround until we adopt nofs allocation scope consistently or improve the locking constraints.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于新创建的符号链接存在死锁问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 21fc61c73c3903c4c312d0802da01ec2b323d174 ~ cc38c596e648575ce58bfc31623a6506eda4b94a -
Linux Linux 4.5 -

II. Public POCs for CVE-2024-50229

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50229

请登录查看更多情报信息。

Patches & Fixes for CVE-2024-50229 (8)

Same Patch Batch · Linux · 2024-11-09 · 49 CVEs total

CVE-2024-50215 8.1 HIGH nvmet-auth: assign dh_key to NULL after kfree_sensitive
CVE-2024-50225 7.8 HIGH btrfs: fix error propagation of split bios
CVE-2024-50217 7.8 HIGH btrfs: fix use-after-free of block device file in __btrfs_free_extra_devids()
CVE-2024-50221 7.8 HIGH drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
CVE-2024-50262 7.8 HIGH bpf: Fix out-of-bounds write in trie_get_next_key()
CVE-2024-50261 7.8 HIGH macsec: Fix use-after-free while sending the offloading packet
CVE-2024-50246 7.8 HIGH fs/ntfs3: Add rough attr alloc_size check
CVE-2024-50230 7.8 HIGH nilfs2: fix kernel bug due to missing clearing of checked flag
CVE-2024-50253 7.8 HIGH bpf: Check the validity of nr_words in bpf_iter_bits_new()
CVE-2024-50237 7.8 HIGH wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
CVE-2024-50250 7.8 HIGH fsdax: dax_unshare_iter needs to copy entire blocks
CVE-2024-50235 7.8 HIGH wifi: cfg80211: clear wdev->cqm_config pointer on free
CVE-2024-50256 7.5 HIGH netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
CVE-2024-50241 7.5 HIGH NFSD: Initialize struct nfsd4_copy earlier
CVE-2024-50247 7.3 HIGH fs/ntfs3: Check if more than chunk-size bytes are written
CVE-2024-50248 7.1 HIGH ntfs3: Add bounds checking to mi_enum_attr()
CVE-2024-50257 7.0 HIGH netfilter: Fix use-after-free in get_info()
CVE-2024-50222 7.0 HIGH iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
CVE-2024-50245 fs/ntfs3: Fix possible deadlock in mi_read
CVE-2024-50239 phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend

Showing top 20 of 49 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-50229

No comments yet

Leave a comment