PT-2024-29215 · Linux+4 · Linux Kernel+4

Syzbot

·

Published

2024-06-29

·

Updated

2025-10-07

·

CVE-2024-41034

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43
Description The issue is related to the nilfs2 file system in the Linux kernel. It involves a bug in the rename operation of a broken directory, where the block write begin int() function may fail due to a BUG ON check for access exceeding the folio/page size. This is caused by the nilfs dotdot() function not checking consistency enough and potentially returning a location that exceeds the folio/page size for broken directories. The fix involves checking required directory entries (. and ..) in the first chunk of the directory in nilfs dotdot().
Recommendations To resolve the issue, update the Linux kernel to version 6.6.43 or later. As a temporary workaround, consider restricting operations on broken directories to minimize the risk of exploitation.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-388CWE-99

Related Identifiers

BDU:2025-01337
CVE-2024-41034
DLA-4008-1
DSA-5747-1
MGASA-2024-0277
MGASA-2024-0278
OESA-2024-1992
OESA-2024-1994
OESA-2024-1995
OESA-2024-1996
OESA-2025-1078
USN-7003-1
USN-7003-2
USN-7003-3
USN-7003-4
USN-7003-5
USN-7006-1
USN-7007-1
USN-7007-2
USN-7007-3
USN-7009-1
USN-7009-2
USN-7019-1
USN-7089-1
USN-7089-2
USN-7089-3
USN-7089-4
USN-7089-5
USN-7089-6
USN-7089-7
USN-7090-1
USN-7095-1
USN-7156-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu