Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of buffer delay flag Syzbot reported that after nilfs2 reads a corrupted file system image and degrades to read-only, the BUG_ON check for the buffer delay flag in submit_bh_wbc() may fail, causing a kernel bug. This is because the buffer delay flag is not cleared when clearing the buffer state flags to discard a page/folio or a buffer head. So, fix this. This became necessary when the use of nilfs2's own page clear routine was expanded. This state inconsistency does not occur if the buffer is written normally by log writing.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8c26c4e2694a163d525976e804d81cd955bbb40c to < 033bc52f35868c2493a2d95c56ece7fc155d7cb3affected8c26c4e2694a163d525976e804d81cd955bbb40c to < 412a30b1b28d6073ba29c46a2b0f324c5936293faffected8c26c4e2694a163d525976e804d81cd955bbb40c to < 9f2ab98371c2f2488bf3bf3f9b2a73510545e9c1affected8c26c4e2694a163d525976e804d81cd955bbb40c to < 822203f6355f4b322d21e7115419f6b98284be25affected8c26c4e2694a163d525976e804d81cd955bbb40c to < 27524f65621f490184f2ace44cd8e5f3685af4a3affected8c26c4e2694a163d525976e804d81cd955bbb40c to < 743c78d455e784097011ea958b27396001181567affected8c26c4e2694a163d525976e804d81cd955bbb40c to < c6f58ff2d4c552927fe9a187774e668ebba6c7aaaffected8c26c4e2694a163d525976e804d81cd955bbb40c to < 6ed469df0bfbef3e4b44fca954a781919db9f7abaffected
Linux Linux
Default version status: affected
3.10affected0 to < 3.10unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.229 to ≤ 5.10.*unaffected5.15.170 to ≤ 5.15.*unaffected6.1.115 to ≤ 6.1.*unaffected6.6.59 to ≤ 6.6.*unaffected6.11.6 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/033bc52f35868c2493a2d95c56ece7fc155d7cb3 ↗
- https://git.kernel.org/stable/c/412a30b1b28d6073ba29c46a2b0f324c5936293f ↗
- https://git.kernel.org/stable/c/9f2ab98371c2f2488bf3bf3f9b2a73510545e9c1 ↗
- https://git.kernel.org/stable/c/822203f6355f4b322d21e7115419f6b98284be25 ↗
- https://git.kernel.org/stable/c/27524f65621f490184f2ace44cd8e5f3685af4a3 ↗
- https://git.kernel.org/stable/c/743c78d455e784097011ea958b27396001181567 ↗
- https://git.kernel.org/stable/c/c6f58ff2d4c552927fe9a187774e668ebba6c7aa ↗
- https://git.kernel.org/stable/c/6ed469df0bfbef3e4b44fca954a781919db9f7ab ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗