CVE - CVE-2024-50202

CVE-ID
CVE-2024-50202	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/08cfa12adf888db98879dbd735bc741360a34168 URL:https://git.kernel.org/stable/c/08cfa12adf888db98879dbd735bc741360a34168 MISC:https://git.kernel.org/stable/c/270a6f9df35fa2aea01ec23770dc9b3fc9a12989 URL:https://git.kernel.org/stable/c/270a6f9df35fa2aea01ec23770dc9b3fc9a12989 MISC:https://git.kernel.org/stable/c/9698088ac7704e260f492d9c254e29ed7dd8729a URL:https://git.kernel.org/stable/c/9698088ac7704e260f492d9c254e29ed7dd8729a MISC:https://git.kernel.org/stable/c/b4b3dc9e7e604be98a222e9f941f5e93798ca475 URL:https://git.kernel.org/stable/c/b4b3dc9e7e604be98a222e9f941f5e93798ca475 MISC:https://git.kernel.org/stable/c/bb857ae1efd3138c653239ed1e7aef14e1242c81 URL:https://git.kernel.org/stable/c/bb857ae1efd3138c653239ed1e7aef14e1242c81 MISC:https://git.kernel.org/stable/c/c1d0476885d708a932980b0f28cd90d9bd71db39 URL:https://git.kernel.org/stable/c/c1d0476885d708a932980b0f28cd90d9bd71db39 MISC:https://git.kernel.org/stable/c/edf8146057264191d5bfe5b91773f13d936dadd3 URL:https://git.kernel.org/stable/c/edf8146057264191d5bfe5b91773f13d936dadd3 MISC:https://git.kernel.org/stable/c/efa810b15a25531cbc2f527330947b9fe16916e7 URL:https://git.kernel.org/stable/c/efa810b15a25531cbc2f527330947b9fe16916e7
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)