CVE-2024-50116
Linux Kernel Nilfs2 Invalid Buffer Delay Flagegers
Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUG_ON check for the buffer delay flag in submit_bh_wbc() may fail, causing a kernel bug. This is because the buffer delay flag is not cleared when clearing the buffer state flags to discard a page/folio or a buffer head. So, fix this. This became necessary when the use of nilfs2's own page clear routine was expanded. This state inconsistency does not occur if the buffer is written normally by log writing.
INFO
Published Date :
Nov. 5, 2024, 6:15 p.m.
Last Modified :
Nov. 8, 2024, 7:17 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-50116.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-50116 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-50116 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Nov. 08, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/033bc52f35868c2493a2d95c56ece7fc155d7cb3 No Types Assigned https://git.kernel.org/stable/c/033bc52f35868c2493a2d95c56ece7fc155d7cb3 Patch Changed Reference Type https://git.kernel.org/stable/c/27524f65621f490184f2ace44cd8e5f3685af4a3 No Types Assigned https://git.kernel.org/stable/c/27524f65621f490184f2ace44cd8e5f3685af4a3 Patch Changed Reference Type https://git.kernel.org/stable/c/412a30b1b28d6073ba29c46a2b0f324c5936293f No Types Assigned https://git.kernel.org/stable/c/412a30b1b28d6073ba29c46a2b0f324c5936293f Patch Changed Reference Type https://git.kernel.org/stable/c/6ed469df0bfbef3e4b44fca954a781919db9f7ab No Types Assigned https://git.kernel.org/stable/c/6ed469df0bfbef3e4b44fca954a781919db9f7ab Patch Changed Reference Type https://git.kernel.org/stable/c/743c78d455e784097011ea958b27396001181567 No Types Assigned https://git.kernel.org/stable/c/743c78d455e784097011ea958b27396001181567 Patch Changed Reference Type https://git.kernel.org/stable/c/822203f6355f4b322d21e7115419f6b98284be25 No Types Assigned https://git.kernel.org/stable/c/822203f6355f4b322d21e7115419f6b98284be25 Patch Changed Reference Type https://git.kernel.org/stable/c/9f2ab98371c2f2488bf3bf3f9b2a73510545e9c1 No Types Assigned https://git.kernel.org/stable/c/9f2ab98371c2f2488bf3bf3f9b2a73510545e9c1 Patch Changed Reference Type https://git.kernel.org/stable/c/c6f58ff2d4c552927fe9a187774e668ebba6c7aa No Types Assigned https://git.kernel.org/stable/c/c6f58ff2d4c552927fe9a187774e668ebba6c7aa Patch Added CWE NIST NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.10 up to (excluding) 4.19.323 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.285 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.229 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.170 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.115 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.59 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.6 *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 08, 2024
Action Type Old Value New Value Added Reference kernel.org https://git.kernel.org/stable/c/033bc52f35868c2493a2d95c56ece7fc155d7cb3 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/412a30b1b28d6073ba29c46a2b0f324c5936293f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/9f2ab98371c2f2488bf3bf3f9b2a73510545e9c1 [No types assigned] -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 05, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUG_ON check for the buffer delay flag in submit_bh_wbc() may fail, causing a kernel bug. This is because the buffer delay flag is not cleared when clearing the buffer state flags to discard a page/folio or a buffer head. So, fix this. This became necessary when the use of nilfs2's own page clear routine was expanded. This state inconsistency does not occur if the buffer is written normally by log writing. Added Reference kernel.org https://git.kernel.org/stable/c/822203f6355f4b322d21e7115419f6b98284be25 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/27524f65621f490184f2ace44cd8e5f3685af4a3 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/743c78d455e784097011ea958b27396001181567 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c6f58ff2d4c552927fe9a187774e668ebba6c7aa [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/6ed469df0bfbef3e4b44fca954a781919db9f7ab [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-50116 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-50116
weaknesses.