CVE-2024-50230 nilfs2: fix kernel bug due to missing clearing of checked flag
A missing flag clearing in the nilfs2 filesystem can trigger a kernel bug and crash the system when handling corrupted directories.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-50230?
CVE-2024-50230 is a high-severity memory corruption vulnerability in Linux kernel, published on 9 Nov 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug due to missing clearing of checked flag
Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __block_write_begin_int(), which is called to prepare block writes, may fail the BUG_ON check for accesses exceeding the folio/page size, triggering a kernel bug.
This was found to be because the "checked" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that.
This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.
Weakness: CWE-787
Which versions are affected by CVE-2024-50230?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-50230?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-50230 being exploited?
There is no known exploitation of CVE-2024-50230 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-53004, AZL-53066, BELL-CVE-2024-50230, DEBIAN-CVE-2024-50230, GHSA-m4g4-rwxc-376v, UBUNTU-CVE-2024-50230.