PT-2024-36927 · Linux+7 · Linux Kernel+7
Syzbot
·
Published
2024-12-05
·
Updated
2025-10-03
·
CVE-2024-56619
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
A potential out-of-bounds memory access issue in the
nilfs find entry() function has been resolved. This issue occurs when searching for records in a directory with a corrupted inode size, potentially leading to memory access outside the folio/page range or detection of a use-after-free bug if KASAN is enabled. The problem is caused by the nilfs last byte() function losing the upper 32 bits of 64-bit size information due to an inappropriate type of local variable. This results in a large byte offset value and memory access that exceeds the folio/page size.Recommendations
To resolve this issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider restricting access to the
nilfs find entry() function until a patch is available. Additionally, ensure that the nilfs last byte() function is properly truncated to not exceed PAGE SIZE to prevent bit loss.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu