PT-2024-21472
CVE-2024-26697
·
Published
2024-02-07
·
Updated
2026-10-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the nilfs2 file system in the Linux kernel. Specifically, the helper function
nilfs recovery copy block() of nilfs recovery dsync blocks() incorrectly calculates the on-page offset when copying repair data to the file's page cache. This flaw can cause data corruption and leak uninitialized memory bytes during the recovery process, particularly in environments where the block size is smaller than the page size.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾