In the Linux kernel, the following vulnerability has been resolved:
nilfs2: add missing check for inode numbers on directory entries
Syzbot reported that mounting and unmounting a specific pattern of corrupted nilfs2 filesystem images causes a use-after-free of metadata file inodes, which triggers a kernel bug in lru_add_fn().
As Jan Kara pointed out, this is because the link count of a metadata file gets corrupted to 0, and nilfs_evict_inode(), which is called from iput(), tries to delete that inode (ifile inode in this case).
The inconsistency occurs because directories containing the inode numbers of these metadata files that should not be visible in the namespace are read without checking.
Fix this issue by treating the inode numbers of these internal files as errors in the sanity check helper when reading directory folios/pages.
Also thanks to Hillf Danton and Matthew Wilcox for their initial mm-layer analysis.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.223-211.872Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.352-267.564 | Mar 4, 2025 | Jul 30, 2024 |
| Amazon_linux | — | Upgrade kernel | Mar 7, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-trace-baseUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade dtb-armUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade kernel-xen-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-trace-develUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-ec2-develUpgrade kernel-traceUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-ec2-baseUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-xen-baseUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rt | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-261-genericUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibm-classicUpgrade linux-image-azureUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1131-oracle | Sep 13, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub