CVE-2024-41034: nilfs2: fix kernel bug on rename operation of broken directory
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug on rename operation of broken directory
Syzbot reported that in rename directory operation on broken directory on nilfs2, blockwritebeginint() called to prepare block write may fail BUGON check for access exceeding the folio/page size.
This is because nilfsdotdot(), which gets parent directory reference entry ("..") of the directory to be moved or renamed, does not check consistency enough, and may return location exceeding folio/page size for broken directories.
Fix this issue by checking required directory entries ("." and "..") in the first chunk of the directory in nilfsdotdot().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-41034?
The severity of CVE-2024-41034 is categorized as medium, affecting the rename operation in nilfs2 filesystems.
How do I fix CVE-2024-41034?
To fix CVE-2024-41034, update to the patched kernel versions provided in the affected software list.
What versions are affected by CVE-2024-41034?
CVE-2024-41034 affects the Debian kernel versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, and 6.12.11-1.
What is the nature of the vulnerability described in CVE-2024-41034?
CVE-2024-41034 is a bug in the Linux kernel related to handling rename operations on broken directories in the nilfs2 filesystem.
Is CVE-2024-41034 a local or remote vulnerability?
CVE-2024-41034 is considered a local vulnerability, as it requires local access to exploit the issue.