Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-26848
HistoryApr 17, 2024 - 11:15 a.m.

CVE-2024-26848

2024-04-1711:15:08
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
1
linux kernel
vulnerability
directory parsing
endless loop
fix
code
soft lookup
bug
cpu
watchdog
rip
cve
bugzilla.

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix endless loop in directory parsing

If a directory has a block with only “.__afsXXXX” files in it (from
uncompleted silly-rename), these .__afsXXXX files are skipped but without
advancing the file position in the dir_context. This leads to
afs_dir_iterate() repeating the block again and again.

Fix this by making the code that skips the .__afsXXXX file also manually
advance the file position.

The symptoms are a soft lookup:

    watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737]
    ...
    RIP: 0010:afs_dir_iterate_block+0x39/0x1fd
    ...
     ? watchdog_timer_fn+0x1a6/0x213
    ...
     ? asm_sysvec_apic_timer_interrupt+0x16/0x20
     ? afs_dir_iterate_block+0x39/0x1fd
     afs_dir_iterate+0x10a/0x148
     afs_readdir+0x30/0x4a
     iterate_dir+0x93/0xd3
     __do_sys_getdents64+0x6b/0xd4

This is almost certainly the actual fix for:

    https://bugzilla.kernel.org/show_bug.cgi?id=218496

References

7.5 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%