CVE-2024-47669

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix state management in error path of log writing function

After commit a694291a6211 ("nilfs2: separate wait function from

nilfs_segctor_write") was applied, the log writing function

nilfs_segctor_do_construct() was able to issue I/O requests continuously

even if user data blocks were split into multiple logs across segments,

but two potential flaws were introduced in its error handling.

First, if nilfs_segctor_begin_construction() fails while creating the

second or subsequent logs, the log writing function returns without

calling nilfs_segctor_abort_construction(), so the writeback flag set on

pages/folios will remain uncleared. This causes page cache operations to

hang waiting for the writeback flag. For example,

truncate_inode_pages_final(), which is called via nilfs_evict_inode() when

an inode is evicted from memory, will hang.

Second, the NILFS_I_COLLECTED flag set on normal inodes remain uncleared.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References