CVE-2024-41034

kernel: nilfs2: fix kernel bug on rename operation of broken directory

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · July 29, 2024

Updated · August 28, 2026

Description

The Linux kernel vulnerability in nilfs2 related to the rename operation has been resolved. The issue arose when attempting to rename a directory in the nilfs2 file system, where nilfs_dotdot() might return an entry location exceeding the folio/page size for broken directories, leading to a BUG_ON failure.

Statement

Red Hat Enterprise Linux is not vulnerable to this CVE, as it does not affect the versions or configurations of the Linux kernel used in its distributions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-125 · Out-of-bounds Read