CVE-2024-50230

Summary

CVE-2024-50230 is a Linux kernel vulnerability that was recently addressed. The issue was identified in the nilfs2 file system where, during directory operations, the "checked" flag of a page or folio was not being cleared when it was discarded by nilfs2's own routine. This oversight led to a kernel bug being triggered when certain accesses exceeded the folio/page size. The vulnerability was particularly problematic when nilfs2's page discard routine was applied to files beyond metadata. Syzbot reported that this bug could occur after nilfs2 detected filesystem corruption and degraded to read-only mode. The bug was resolved by ensuring that the "checked" flag is cleared when a page or folio is discarded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.