CVE-2024-53690

nilfs2: prevent use of deleted inode

published January 11, 2025

CVSS
—
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: prevent use of deleted inode

syzbot reported a WARNING in nilfs_rmdir. [1]

Because the inode bitmap is corrupted, an inode with an inode number that

should exist as a ".nilfs" file was reassigned by nilfs_mkdir for "file0",

causing an inode duplication during execution. And this causes an

underflow of i_nlink in rmdir operations.

The inode is used twice by the same task to unmount and remove directories

".nilfs" and "file0", it trigger warning in nilfs_rmdir.

Avoid to this issue, check i_nlink in nilfs_iget(), if it is 0, it means

that this inode has been deleted, and iput is executed to reclaim it.

[1]

WARNING: CPU: 1 PID: 5824 at fs/inode.c:407 drop_nlink+0xc4/0x110 fs/inode.c:407

...

Call Trace:

<TASK>

nilfs_rmdir+0x1b0/0x250 fs/nilfs2/namei.c:342

vfs_rmdir+0x3a3/0x510 fs/namei.c:4394

do_rmdir+0x3b5/0x580 fs/namei.c:4453

__do_sys_rmdir fs/namei.c:4472 [inline]

__se_sys_rmdir fs/namei.c:4470 [inline]

__x64_sys_rmdir+0x47/0x50 fs/namei.c:4470

do_syscall_x64 arch/x86/entry/common.c:52 [inline]

do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83

entry_SYSCALL_64_after_hwframe+0x77/0x7f

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Published
2025-01-11T12:35Z
EPSS history
Timeline
  • 11 JAN 12:35Z
    nilfs2: prevent use of deleted inode
    cvelistv5