CVE-2024-26848: afs: Fix endless loop in directory parsing
In the Linux kernel, the following vulnerability has been resolved: afs: Fix endless loop in directory parsing If a directory has a block with only ".afsXXXX" files in it (from uncompleted silly-rename), these .afsXXXX files are skipped but without advancing the file position in the dircontext. This leads to afsdiriterate() repeating the block again and again. Fix this by making the code that skips the .afsXXXX file also manually advance the file position. The symptoms are a soft lookup: watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737] ... RIP: 0010:afsdiriterateblock+0x39/0x1fd ... ? watchdogtimerfn+0x1a6/0x213 ... ? asmsysvecapictimerinterrupt+0x16/0x20 ? afsdiriterateblock+0x39/0x1fd afsdiriterate+0x10a/0x148 afsreaddir+0x30/0x4a iteratedir+0x93/0xd3 dosysgetdents64+0x6b/0xd4 This is almost certainly the actual fix for: https://bugzilla.kernel.org/showbug.cgi?id=218496
Other sources
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Modify the AFS directory-parsing code so that when .__afsXXXX files are skipped, it manually advances the file position in the dir_context.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26848?
CVE-2024-26848 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26848?
To fix CVE-2024-26848, users should apply the latest kernel patches provided by their Linux distribution.
What type of vulnerability is CVE-2024-26848?
CVE-2024-26848 is a directory parsing vulnerability that may lead to an endless loop.
Which versions of the Linux kernel are affected by CVE-2024-26848?
CVE-2024-26848 affects multiple versions of the Linux kernel where directory handling routines have flaws.
Can CVE-2024-26848 be exploited remotely?
CVE-2024-26848 typically requires local access to exploit, making remote exploitation unlikely.