CVE-2024-39469

Source
https://cve.org/CVERecord?id=CVE-2024-39469
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39469.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-39469
Downstream
Related
Published
2024-06-25T14:28:55.581Z
Modified
2026-03-14T12:34:43.674159Z
Summary
nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
Details

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix nilfsemptydir() misjudgment and long loop on I/O errors

The error handling in nilfsemptydir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or nilfscheckfolio() fails, it will falsely determine the directory as empty and corrupt the file system.

In addition, since nilfsemptydir() does not immediately return on a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the directory's inode is also corrupted, causing the log writer thread to wait and hang, as reported by syzbot.

Fix these issues by making nilfsemptydir() immediately return a false value (0) if it fails to get a directory folio/page.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39469.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2ba466d74ed74f073257f86e61519cb8f8f46184
Fixed
2ac8a2fe22bdde9eecce2a42cf5cab79333fb428
Fixed
405b71f1251e5ae865f53bd27c45114e6c83bee3
Fixed
c77ad608df6c091fe64ecb91f41ef7cb465587f1
Fixed
11a2edb70356a2202dcb7c9c189c8356ab4752cd
Fixed
129dcd3e7d036218db3f59c82d82004b9539ed82
Fixed
d18b05eda7fa77f02114f15b02c009f28ee42346
Fixed
59f14875a96ef93f05b82ad3c980605f2cb444b5
Fixed
7373a51e7998b508af7136530f3a997b286ce81c

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39469.json"