跳转到帖子

Amazon Linux AMI: CVE-2024-50230: Security patch for kernel (ALAS-2025-1957)

recommended_posts

发布于
  • Members

Amazon Linux AMI: CVE-2024-50230: Security patch for kernel (ALAS-2025-1957)

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
11/09/2024
Created
02/11/2025
Added
02/06/2025
Modified
02/06/2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix kernel bug due to missing clearing of checked flag

Syzbot reported that in directory operations after nilfs2 detects

filesystem corruption and degrades to read-only,

__block_write_begin_int(), which is called to prepare block writes, may

fail the BUG_ON check for accesses exceeding the folio/page size,

triggering a kernel bug.

This was found to be because the "checked" flag of a page/folio was not

cleared when it was discarded by nilfs2's own routine, which causes the

sanity check of directory entries to be skipped when the directory

page/folio is reloaded.So, fix that.

This was necessary when the use of nilfs2's own page discard routine was

applied to more than just metadata files.

Solution(s)

  • amazon-linux-upgrade-kernel

References

  • ALAS-2025-1957
  • CVE-2024-50230
  • 查看数 696
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…