In the Linux kernel, the following vulnerability has been resolved:
nilfs2: propagate directory read errors from nilfs_find_entry()
Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2.
The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails.
If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts.
Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry().
The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Mar 14, 2025 | Nov 8, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 8, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-4.15.0-1148-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1081-azureUpgrade linux-image-aws-4.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-4.4.0-1148-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-4.15.0-1177-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1167-kvmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-ibm-classicUpgrade linux-image-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-4.4.0-272-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-4.4.0-272-lowlatencyUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-4.15.0-241-lowlatencyUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-4.15.0-1146-oracleUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-gcp-4.15Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-4.15.0-2101-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1184-awsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.8.0-1025-awsUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-azureUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-4.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-1117-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1139-fipsUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-4.4.0-1185-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-4.15.0-2085-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-realtimeUpgrade linux-image-azure-fips-4.15Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-4.4.0-1147-awsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1145-azureUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-241-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-4.15.0-1192-azureUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-2122-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-aws-fips-4.15Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-133-genericUpgrade linux-image-azure-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-20.04 | Feb 20, 2025 | Nov 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub