In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via nilfs_find_entry(), so fix it together.

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50202 advisory.

  - In the Linux kernel, the following vulnerability has been resolved: nilfs2: propagate directory read     errors from nilfs_find_entry() Syzbot reported that a task hang occurs in vcs_open() during a fuzzing test     for nilfs2. The root cause of this problem is that in nilfs_find_entry(), which searches for directory     entries, ignores errors when loading a directory page/folio via nilfs_get_folio() fails. If the filesystem     images is corrupted, and the i_size of the directory inode is large, and the directory page/folio is     successfully read but fails the sanity check, for example when it is zero-filled, nilfs_check_folio() may     continue to spit out error messages in bursts. Fix this issue by propagating the error to the callers when     loading a page/folio fails in nilfs_find_entry(). The current interface of nilfs_find_entry() and its     callers is outdated and cannot propagate error codes such as -EIO and -ENOMEM returned via     nilfs_find_entry(), so fix it together. (CVE-2024-50202)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

ID	Name	Product	Family	Severity
213056	Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2024-12884)	Nessus	Oracle Linux Local Security Checks	critical
212993	CBL Mariner 2.0 Security Update: kernel (CVE-2024-50202)	Nessus	MarinerOS Local Security Checks	medium
211393	Photon OS 4.0: Linux PHSA-2024-4.0-0711	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2024-50202

medium

Tenable Plugins

critical

medium

high