In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug due to missing clearing of checked flag
Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __block_write_begin_int(), which is called to prepare block writes, may fail the BUG_ON check for accesses exceeding the folio/page size, triggering a kernel bug.
This was found to be because the "checked" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that.
This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.227-219.884Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.355-275.582Upgrade bpftoolUpgrade kernel-livepatch-5.10.228-219.884Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.230-223.885Upgrade perfUpgrade kernel-toolsUpgrade python-perf | Jan 27, 2025 | Nov 9, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2025 | Nov 9, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-awsUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-134-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-gkeUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-fipsUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub