CVE-2024-41034

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43

Description The issue is related to the nilfs2 file system in the Linux kernel. It involves a bug in the rename operation of a broken directory, where the block write begin int() function may fail due to a BUG ON check for access exceeding the folio/page size. This is caused by the nilfs dotdot() function not checking consistency enough and potentially returning a location that exceeds the folio/page size for broken directories. The fix involves checking required directory entries (. and ..) in the first chunk of the directory in nilfs dotdot().

Recommendations To resolve the issue, update the Linux kernel to version 6.6.43 or later. As a temporary workaround, consider restricting operations on broken directories to minimize the risk of exploitation.