blob: 2d3d1196667271c3300aea70f26f7cabc4577291 [file] [log] [blame]
{
"containers": {
"cna": {
"providerMetadata": {
"orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038"
},
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix endless loop in directory parsing\n\nIf a directory has a block with only \".__afsXXXX\" files in it (from\nuncompleted silly-rename), these .__afsXXXX files are skipped but without\nadvancing the file position in the dir_context. This leads to\nafs_dir_iterate() repeating the block again and again.\n\nFix this by making the code that skips the .__afsXXXX file also manually\nadvance the file position.\n\nThe symptoms are a soft lookup:\n\n watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737]\n ...\n RIP: 0010:afs_dir_iterate_block+0x39/0x1fd\n ...\n ? watchdog_timer_fn+0x1a6/0x213\n ...\n ? asm_sysvec_apic_timer_interrupt+0x16/0x20\n ? afs_dir_iterate_block+0x39/0x1fd\n afs_dir_iterate+0x10a/0x148\n afs_readdir+0x30/0x4a\n iterate_dir+0x93/0xd3\n __do_sys_getdents64+0x6b/0xd4\n\nThis is almost certainly the actual fix for:\n\n https://bugzilla.kernel.org/show_bug.cgi?id=218496"
}
],
"affected": [
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"fs/afs/dir.c"
],
"versions": [
{
"version": "01d15b68f0418382626792ab35b3fa97a1d406ea",
"lessThan": "5c78be006ed9cb735ac2abf4fd64f3f4ea26da31",
"status": "affected",
"versionType": "git"
},
{
"version": "01d15b68f0418382626792ab35b3fa97a1d406ea",
"lessThan": "854ebf45a4ddd4cadeffb6644e88d19020634e1a",
"status": "affected",
"versionType": "git"
},
{
"version": "8499e2f1218ee8d3029360a10001a6374dd135b7",
"lessThan": "96370ba395c572ef496fd2c7afc4a1ab3dedd3f0",
"status": "affected",
"versionType": "git"
},
{
"version": "8499e2f1218ee8d3029360a10001a6374dd135b7",
"lessThan": "b94f434fe977689da4291dc21717790b9bd1c064",
"status": "affected",
"versionType": "git"
},
{
"version": "21a2115e0ca0c1b6b1b105fbc761acd9ab93adcd",
"lessThan": "80b15346492bdba677bbb0adefc611910e505f7b",
"status": "affected",
"versionType": "git"
},
{
"version": "21a2115e0ca0c1b6b1b105fbc761acd9ab93adcd",
"lessThan": "a6ffae61ad9ebf2fdcb943135b2f30c85f49cd27",
"status": "affected",
"versionType": "git"
},
{
"version": "ab49164c60803d5f637fa9643270db9f459d852c",
"lessThan": "058ed71e0f7aa3b6694ca357e23d084e5d3f2470",
"status": "affected",
"versionType": "git"
},
{
"version": "ab49164c60803d5f637fa9643270db9f459d852c",
"lessThan": "76426abf9b980b46983f97de8e5b25047b4c9863",
"status": "affected",
"versionType": "git"
},
{
"version": "a53411e805e02d813b2f2fd2c9d6eaca1d37fb08",
"lessThan": "f67898867b6b0f4542cddc7fe57997978b948a7a",
"status": "affected",
"versionType": "git"
},
{
"version": "a53411e805e02d813b2f2fd2c9d6eaca1d37fb08",
"lessThan": "106e14ca55a0acb3236ee98813a1d243f8aa2d05",
"status": "affected",
"versionType": "git"
},
{
"version": "fa70c6954aabbfbca1fe39b9b60f82cf2e8cec38",
"lessThan": "fe02316e4933befc621fa125efb8f8b4d04cceec",
"status": "affected",
"versionType": "git"
},
{
"version": "fa70c6954aabbfbca1fe39b9b60f82cf2e8cec38",
"lessThan": "9c41f4935625218a2053a2dce1423c3054169809",
"status": "affected",
"versionType": "git"
},
{
"version": "57e9d49c54528c49b8bffe6d99d782ea051ea534",
"lessThan": "5f7a07646655fb4108da527565dcdc80124b14c4",
"status": "affected",
"versionType": "git"
},
{
"version": "57e9d49c54528c49b8bffe6d99d782ea051ea534",
"lessThan": "2afdd0cb02329464d77f3ec59468395c791a51a4",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"fs/afs/dir.c"
],
"versions": [
{
"version": "6.8",
"status": "affected"
},
{
"version": "0",
"lessThan": "6.8",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.4.271",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.4.273",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.10.212",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.10.214",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.15.151",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "5.15.153",
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.1.81",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.1.83",
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.6.21",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.6.23",
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.7.9",
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.7.11",
"lessThanOrEqual": "6.7.*",
"status": "unaffected",
"versionType": "semver"
},
{
"version": "6.8.2",
"lessThanOrEqual": "6.8.*",
"status": "unaffected",
"versionType": "semver"
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/5c78be006ed9cb735ac2abf4fd64f3f4ea26da31"
},
{
"url": "https://git.kernel.org/stable/c/854ebf45a4ddd4cadeffb6644e88d19020634e1a"
},
{
"url": "https://git.kernel.org/stable/c/96370ba395c572ef496fd2c7afc4a1ab3dedd3f0"
},
{
"url": "https://git.kernel.org/stable/c/b94f434fe977689da4291dc21717790b9bd1c064"
},
{
"url": "https://git.kernel.org/stable/c/80b15346492bdba677bbb0adefc611910e505f7b"
},
{
"url": "https://git.kernel.org/stable/c/a6ffae61ad9ebf2fdcb943135b2f30c85f49cd27"
},
{
"url": "https://git.kernel.org/stable/c/058ed71e0f7aa3b6694ca357e23d084e5d3f2470"
},
{
"url": "https://git.kernel.org/stable/c/76426abf9b980b46983f97de8e5b25047b4c9863"
},
{
"url": "https://git.kernel.org/stable/c/f67898867b6b0f4542cddc7fe57997978b948a7a"
},
{
"url": "https://git.kernel.org/stable/c/106e14ca55a0acb3236ee98813a1d243f8aa2d05"
},
{
"url": "https://git.kernel.org/stable/c/fe02316e4933befc621fa125efb8f8b4d04cceec"
},
{
"url": "https://git.kernel.org/stable/c/9c41f4935625218a2053a2dce1423c3054169809"
},
{
"url": "https://git.kernel.org/stable/c/5f7a07646655fb4108da527565dcdc80124b14c4"
},
{
"url": "https://git.kernel.org/stable/c/2afdd0cb02329464d77f3ec59468395c791a51a4"
}
],
"title": "afs: Fix endless loop in directory parsing",
"x_generator": {
"engine": "bippy-5f407fcff5a0"
}
}
},
"cveMetadata": {
"assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038",
"cveID": "CVE-2024-26848",
"requesterUserId": "gregkh@kernel.org",
"serial": "1",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0"
}