Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-26848
HistoryApr 17, 2024 - 11:15 a.m.

CVE-2024-26848

2024-04-1711:15:08
Debian Security Bug Tracker
security-tracker.debian.org
6
cve-2024-26848
directory parsing
endless loop
fix
unix

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

In the Linux kernel, the following vulnerability has been resolved: afs: Fix endless loop in directory parsing If a directory has a block with only “.__afsXXXX” files in it (from uncompleted silly-rename), these .__afsXXXX files are skipped but without advancing the file position in the dir_context. This leads to afs_dir_iterate() repeating the block again and again. Fix this by making the code that skips the .__afsXXXX file also manually advance the file position. The symptoms are a soft lookup: watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737] … RIP: 0010:afs_dir_iterate_block+0x39/0x1fd … ? watchdog_timer_fn+0x1a6/0x213 … ? asm_sysvec_apic_timer_interrupt+0x16/0x20 ? afs_dir_iterate_block+0x39/0x1fd afs_dir_iterate+0x10a/0x148 afs_readdir+0x30/0x4a iterate_dir+0x93/0xd3 __do_sys_getdents64+0x6b/0xd4 This is almost certainly the actual fix for: https://bugzilla.kernel.org/show_bug.cgi?id=218496

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%