CVE-2024-26955: nilfs2: prevent kernel bug at submit_bh_wbc()
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: prevent kernel bug at submitbhwbc()
Fix a bug where nilfsgetblock() returns a successful status when searching and inserting the specified block both fail inconsistently. If this inconsistent behavior is not due to a previously fixed bug, then an unexpected race is occurring, so return a temporary error -EAGAIN instead.
This prevents callers such as blockwritebeginint() from requesting a read into a buffer that is not mapped, which would cause the BUGON check for the BHMapped flag in submitbhwbc() to fail.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26955?
CVE-2024-26955 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-26955?
To fix CVE-2024-26955, update your Linux kernel to the patched versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2024-26955?
CVE-2024-26955 affects the Linux kernel versions specified in the affected software list, particularly in Debian distributions.
What does CVE-2024-26955 exploit?
CVE-2024-26955 exploits inconsistent behavior in nilfs_get_block(), which can lead to kernel bugs during certain operations.
Is CVE-2024-26955 already resolved?
Yes, CVE-2024-26955 has been resolved with updates to the Linux kernel.