CVE-2024-50116: nilfs2: fix kernel bug due to missing clearing of buffer delay flag
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug due to missing clearing of buffer delay flag
Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUGON check for the buffer delay flag in submitbhwbc() may fail, causing a kernel bug.
This is because the buffer delay flag is not cleared when clearing the buffer state flags to discard a page/folio or a buffer head. So, fix this.
This became necessary when the use of nilfs2's own page clear routine was expanded. This state inconsistency does not occur if the buffer is written normally by log writing.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50116?
CVE-2024-50116 has a moderate severity that could lead to potential system degradation.
How do I fix CVE-2024-50116?
To fix CVE-2024-50116, update your Linux kernel to the latest available version that resolves this vulnerability.
Which versions of Linux Kernel are affected by CVE-2024-50116?
CVE-2024-50116 affects Linux kernel versions from 3.10 up to 6.12-rc4, with specific ranges for various versions.
What impact does CVE-2024-50116 have on nilfs2 file systems?
CVE-2024-50116 can cause nilfs2 to read corrupted file system images, leading to a read-only state and potential data integrity issues.
Is there a workaround for CVE-2024-50116 while waiting for a patch?
Currently, there are no widely recommended workarounds for CVE-2024-50116; it is best to apply the patch promptly when available.