PT-2024-33949 · Linux+7 · Linux Kernel+7
Syzbot
·
Published
2024-11-05
·
Updated
2025-10-03
·
CVE-2024-50116
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.6.61
Description:
A kernel bug in the Linux kernel has been resolved, specifically in the nilfs2 file system. The issue occurs when nilfs2 reads a corrupted file system image and degrades to read-only, causing the BUG ON check for the buffer delay flag in
submit bh wbc() to fail. This happens because the buffer delay flag is not cleared when clearing the buffer state flags to discard a page/folio or a buffer head. The state inconsistency does not occur if the buffer is written normally by log writing.Recommendations:
For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider disabling the use of nilfs2's own page clear routine until a patch is available. Restrict access to corrupted file system images to minimize the risk of exploitation. Avoid using the
submit bh wbc() function with corrupted file system images until the issue is resolved.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu