VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 29, 2024· Updated Aug 4, 2026

CVE-2024-41034

CVE-2024-41034

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix kernel bug on rename operation of broken directory

Syzbot reported that in rename directory operation on broken directory on nilfs2, __block_write_begin_int() called to prepare block write may fail BUG_ON check for access exceeding the folio/page size.

This is because nilfs_dotdot(), which gets parent directory reference entry ("..") of the directory to be moved or renamed, does not check consistency enough, and may return location exceeding folio/page size for broken directories.

Fix this issue by checking required directory entries ("." and "..") in the first chunk of the directory in nilfs_dotdot().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • osv-coords
    pkg:linux/kernel
    Range: >= 2.6.30, < 4.19.318
  • Linux/nilfs2llm-fuzzy
  • Linux/Kernelllm-fuzzy10 versions
    (expand)+ 9 more
    • (no CPE)
    • (no CPE)range: 2.6.30
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=2.6.30,<4.19.318
    • cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.10:rc7:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.