CVE-2024-50202
Linux Nilfs2 Directory Corruption Error Propagation
Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.
INFO
Published Date :
Nov. 8, 2024, 6:15 a.m.
Last Modified :
Nov. 19, 2024, 4:12 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-50202.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-50202 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-50202 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Nov. 19, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/08cfa12adf888db98879dbd735bc741360a34168 No Types Assigned https://git.kernel.org/stable/c/08cfa12adf888db98879dbd735bc741360a34168 Patch Changed Reference Type https://git.kernel.org/stable/c/270a6f9df35fa2aea01ec23770dc9b3fc9a12989 No Types Assigned https://git.kernel.org/stable/c/270a6f9df35fa2aea01ec23770dc9b3fc9a12989 Patch Changed Reference Type https://git.kernel.org/stable/c/9698088ac7704e260f492d9c254e29ed7dd8729a No Types Assigned https://git.kernel.org/stable/c/9698088ac7704e260f492d9c254e29ed7dd8729a Patch Changed Reference Type https://git.kernel.org/stable/c/b4b3dc9e7e604be98a222e9f941f5e93798ca475 No Types Assigned https://git.kernel.org/stable/c/b4b3dc9e7e604be98a222e9f941f5e93798ca475 Patch Changed Reference Type https://git.kernel.org/stable/c/bb857ae1efd3138c653239ed1e7aef14e1242c81 No Types Assigned https://git.kernel.org/stable/c/bb857ae1efd3138c653239ed1e7aef14e1242c81 Patch Changed Reference Type https://git.kernel.org/stable/c/c1d0476885d708a932980b0f28cd90d9bd71db39 No Types Assigned https://git.kernel.org/stable/c/c1d0476885d708a932980b0f28cd90d9bd71db39 Patch Changed Reference Type https://git.kernel.org/stable/c/edf8146057264191d5bfe5b91773f13d936dadd3 No Types Assigned https://git.kernel.org/stable/c/edf8146057264191d5bfe5b91773f13d936dadd3 Patch Changed Reference Type https://git.kernel.org/stable/c/efa810b15a25531cbc2f527330947b9fe16916e7 No Types Assigned https://git.kernel.org/stable/c/efa810b15a25531cbc2f527330947b9fe16916e7 Patch Added CWE NIST CWE-755 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 2.6.30 up to (excluding) 4.19.323 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.285 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.228 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.169 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.114 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.58 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.5 *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 08, 2024
Action Type Old Value New Value Added Reference kernel.org https://git.kernel.org/stable/c/bb857ae1efd3138c653239ed1e7aef14e1242c81 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/b4b3dc9e7e604be98a222e9f941f5e93798ca475 [No types assigned] -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 08, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together. Added Reference kernel.org https://git.kernel.org/stable/c/c1d0476885d708a932980b0f28cd90d9bd71db39 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/edf8146057264191d5bfe5b91773f13d936dadd3 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/270a6f9df35fa2aea01ec23770dc9b3fc9a12989 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/9698088ac7704e260f492d9c254e29ed7dd8729a [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/efa810b15a25531cbc2f527330947b9fe16916e7 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/08cfa12adf888db98879dbd735bc741360a34168 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-50202 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-50202
weaknesses.