CVE-2024-26848

2024-04-1711:15:08

416baaa9-dc9f-4396-8d5f-8c081fb06d67

web.nvd.nist.gov

linux kernel

vulnerability

afs module

endless loop

directory parsing

6.6 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.9%

JSON

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix endless loop in directory parsing

If a directory has a block with only “.__afsXXXX” files in it (from
uncompleted silly-rename), these .__afsXXXX files are skipped but without
advancing the file position in the dir_context. This leads to
afs_dir_iterate() repeating the block again and again.

Fix this by making the code that skips the .__afsXXXX file also manually
advance the file position.

The symptoms are a soft lookup:

    watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737]
    ...
    RIP: 0010:afs_dir_iterate_block+0x39/0x1fd
    ...
     ? watchdog_timer_fn+0x1a6/0x213
    ...
     ? asm_sysvec_apic_timer_interrupt+0x16/0x20
     ? afs_dir_iterate_block+0x39/0x1fd
     afs_dir_iterate+0x10a/0x148
     afs_readdir+0x30/0x4a
     iterate_dir+0x93/0xd3
     __do_sys_getdents64+0x6b/0xd4

This is almost certainly the actual fix for:

    https://bugzilla.kernel.org/show_bug.cgi?id=218496

Affected configurations

Vulners

Node

linuxlinux_kernelRange6.8–5.4.271

linuxlinux_kernelRange5.5.0–5.4.273

linuxlinux_kernelRange5.5.0–5.10.212

linuxlinux_kernelRange5.11.0–5.10.214

linuxlinux_kernelRange5.11.0–5.15.151

linuxlinux_kernelRange5.16.0–5.15.153

linuxlinux_kernelRange5.16.0–6.1.81

linuxlinux_kernelRange6.2.0–6.1.83

linuxlinux_kernelRange6.2.0–6.6.21

linuxlinux_kernelRange6.7.0–6.6.23

linuxlinux_kernelRange6.7.0–6.7.9

linuxlinux_kernelRange6.8.0–6.7.11

linuxlinux_kernelRange6.8.0–6.8.2

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/afs/dir.c"
    ],
    "versions": [
      {
        "version": "01d15b68f041",
        "lessThan": "5c78be006ed9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "01d15b68f041",
        "lessThan": "854ebf45a4dd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8499e2f1218e",
        "lessThan": "96370ba395c5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "8499e2f1218e",
        "lessThan": "b94f434fe977",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "21a2115e0ca0",
        "lessThan": "80b15346492b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "21a2115e0ca0",
        "lessThan": "a6ffae61ad9e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ab49164c6080",
        "lessThan": "058ed71e0f7a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ab49164c6080",
        "lessThan": "76426abf9b98",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a53411e805e0",
        "lessThan": "f67898867b6b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "a53411e805e0",
        "lessThan": "106e14ca55a0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fa70c6954aab",
        "lessThan": "fe02316e4933",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "fa70c6954aab",
        "lessThan": "9c41f4935625",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "57e9d49c5452",
        "lessThan": "5f7a07646655",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "57e9d49c5452",
        "lessThan": "2afdd0cb0232",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/afs/dir.c"
    ],
    "versions": [
      {
        "version": "6.8",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.8",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.271",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.4.273",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.212",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.10.214",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.151",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "5.15.153",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.81",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.83",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.21",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.23",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.9",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.11",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8.2",
        "lessThanOrEqual": "6.8.*",
        "status": "unaffected",
        "versionType": "custom"
      }
    ]
  }
]