PT-2024-7895 · Linux+5 · Linux Kernel+5

Ryusuke Konishi

·

Published

2024-03-14

·

Updated

2025-12-23

·

CVE-2024-26955

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the nilfs2 component of the Linux kernel, specifically with the nilfs get block() function. This function may return a successful status even when both searching and inserting a specified block fail, leading to inconsistent behavior. If this behavior is not due to a previously fixed bug, it may indicate an unexpected race condition, prompting the return of a temporary error -EAGAIN. This prevents certain callers, such as block write begin int(), from requesting a read into an unmapped buffer, which could cause a BUG ON check for the BH Mapped flag in submit bh wbc() to fail.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-09399
CVE-2024-26955
DLA-3840-1
DLA-3842-1
DSA-5681-1
OESA-2024-1677
OESA-2024-1678
OESA-2024-1682
OPENSUSE-SU-2024_1644-1
OPENSUSE-SU-2024_1659-1
OPENSUSE-SU-2024_1663-1
SUSE-SU-2024:1644-1
SUSE-SU-2024:1659-1
SUSE-SU-2024:1663-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
USN-6816-1
USN-6817-1
USN-6817-2
USN-6817-3
USN-6878-1
USN-6896-1
USN-6896-2
USN-6896-3
USN-6896-4
USN-6896-5
USN-6898-1
USN-6898-2
USN-6898-3
USN-6898-4
USN-6917-1
USN-6919-1
USN-6927-1
USN-7019-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu