CVE-2024-39469

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-39469

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in nilfs_empty_dir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or nilfs_check_folio() fails, it will falsely determine the directory as empty and corrupt the file system. In addition, since nilfs_empty_dir() does not immediately return on a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the directory's inode is also corrupted, causing the log writer thread to wait and hang, as reported by syzbot. Fix these issues by making nilfs_empty_dir() immediately return a false value (0) if it fails to get a directory folio/page.

References
Link Resource
https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd Patch
https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82 Patch
https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 Patch
https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 Patch
https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5 Patch
https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c Patch
https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 Patch
https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346 Patch
https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd Patch
https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82 Patch
https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 Patch
https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 Patch
https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5 Patch
https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c Patch
https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 Patch
https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
History

03 Nov 2025, 22:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

03 Oct 2025, 15:11

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd - () https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd - Patch
References () https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82 - () https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82 - Patch
References () https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 - () https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 - Patch
References () https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 - () https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 - Patch
References () https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5 - () https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5 - Patch
References () https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c - () https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c - Patch
References () https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 - () https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 - Patch
References () https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346 - () https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346 - Patch
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

21 Nov 2024, 09:27

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd - () https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd -
References () https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82 - () https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82 -
References () https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 - () https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 -
References () https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 - () https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 -
References () https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5 - () https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5 -
References () https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c - () https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c -
References () https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 - () https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 -
References () https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346 - () https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346 -

05 Jul 2024, 08:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: corrige el error de cálculo de nilfs_empty_dir() y el bucle largo en errores de E/S. El manejo de errores en nilfs_empty_dir() cuando falla la lectura de una página/folio de directorio es incorrecto, como en el antiguo ext2 implementación, y si la publicación/página no se puede leer o nilfs_check_folio() falla, determinará erróneamente que el directorio está vacío y dañará el sistema de archivos. Además, dado que nilfs_empty_dir() no regresa inmediatamente tras una lectura fallida de un folio/página, sino que continúa en bucle, esto puede provocar un bucle largo con E/S si i_size del inodo del directorio también está dañado, lo que provoca que el subproceso del escritor de registros se bloquee. espera y cuelga, según lo informado por syzbot. Solucione estos problemas haciendo que nilfs_empty_dir() devuelva inmediatamente un valor falso (0) si no puede obtener una página/folio del directorio.
References
  • () https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd -
  • () https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 -
  • () https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3 -
  • () https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1 -

25 Jun 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-25 15:15

Updated : 2025-11-03 22:17

NVD link : CVE-2024-39469

Mitre link : CVE-2024-39469

CVE.ORG link : CVE-2024-39469

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo