CVE-2024-26955
nilfs2: prevent kernel bug at submit_bh_wbc()
Reported by linux · Published May 1, 2024
In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent kernel bug at submit_bh_wbc() Fix a bug where nilfs_get_block() returns a successful status when searching and inserting the specified block both fail inconsistently. If this inconsistent behavior is not due to a previously fixed bug, then an unexpected race is occurring, so return a temporary error -EAGAIN instead. This prevents callers such as __block_write_begin_int() from requesting a read into a buffer that is not mapped, which would cause the BUG_ON check for the BH_Mapped flag in submit_bh_wbc() to fail.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| kernel-tools-devel | Amazon Linux | 4.14.345-262.561.amzn2 |
| kernel-devel | Amazon Linux | 4.14.345-262.561.amzn2 |
| Linux | Linux | f0fe7ad5aff4f0fcf988913313c497de85f1e186, ca581d237f3b8539c044205bb003de71d75d227c, 91e4c4595fae5e87069e44687ae879091783c183, 76ffbe911e2798c7296968f5fd72f7bf67207a8d, 48d443d200237782dc82e6b60663ec414ef02e39, 32eaee72e96590a75445c8a6c7c1057673b47e07, 269cdf353b5bdd15f1a079671b0f889113865f20, 192e9f9078c96be30b31c4b44d6294b24520fce5, 0c8aa4cfda4e4adb15d5b6536d155eca9c9cd44c |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b |
| Linux | Linux | 2.6.30, 0, 4.19.312 |
| amazon:2 | kernel-tools-devel | 0 |
| amazon:2 | kernel-devel | 0 |
| Linux | Linux | 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b, 1f5abe7e7dbcd83e73212c6cb135a6106cea6a0b |
| amazon:2 | kernel-tools | 0 |
| amazon:2 | kernel | 0 |
| linux | linux_kernel | 2.6.30, 2.6.30, 2.6.30 |
| amazon:2 | perf | 0 |
| amazon:2 | kernel-livepatch-4.14.345-262.561 | 0 |
| amazon:2 | python-perf | 0 |
| amazon:2 | kernel-headers | 0 |
Timeline
- May 1, 2024 EPSS Score (30 in total, the first dated here)
- May 1, 2024 CVE Published
- Oct 4, 2024 Coalition ESS Score (8 in total, the first dated here)
- Jan 15, 2026 Security Advisory (320 in total, the first dated here)
- Mar 30, 2026 Distribution Patch (282 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-26955
vulnetix vdb fixes CVE-2024-26955Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-26955/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart