CVE-2024-41034 nilfs2: fix kernel bug on rename operation of broken directory
A local attacker can cause a kernel crash by renaming a broken directory in the nilfs2 filesystem, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-41034?
CVE-2024-41034 is a high-severity vulnerability in Linux kernel, published on 29 Jul 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug on rename operation of broken directory
Syzbot reported that in rename directory operation on broken directory on nilfs2, __block_write_begin_int() called to prepare block write may fail BUG_ON check for access exceeding the folio/page size.
This is because nilfs_dotdot(), which gets parent directory reference entry ("..") of the directory to be moved or renamed, does not check consistency enough, and may return location exceeding folio/page size for broken directories.
Fix this issue by checking required directory entries ("." and "..") in the first chunk of the directory in nilfs_dotdot().
Which versions are affected by CVE-2024-41034?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-41034?
Apply the vendor's patch.
Is CVE-2024-41034 being exploited?
There is no known exploitation of CVE-2024-41034 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-41034, DEBIAN-CVE-2024-41034, GHSA-v738-pvhm-mhvp, UBUNTU-CVE-2024-41034.