Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26848
HistoryApr 17, 2024 - 7:53 p.m.

CVE-2024-26848

2024-04-1719:53:40
redhat.com
access.redhat.com
8
linux kernel
afs directory
vulnerability fix
soft lockup
bug fix
security

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

17.1%

In the Linux kernel, the following vulnerability has been resolved: afs: Fix endless loop in directory parsing If a directory has a block with only “.__afsXXXX” files in it (from uncompleted silly-rename), these .__afsXXXX files are skipped but without advancing the file position in the dir_context. This leads to afs_dir_iterate() repeating the block again and again. Fix this by making the code that skips the .__afsXXXX file also manually advance the file position. The symptoms are a soft lookup: watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737] … RIP: 0010:afs_dir_iterate_block+0x39/0x1fd … ? watchdog_timer_fn+0x1a6/0x213 … ? asm_sysvec_apic_timer_interrupt+0x16/0x20 ? afs_dir_iterate_block+0x39/0x1fd afs_dir_iterate+0x10a/0x148 afs_readdir+0x30/0x4a iterate_dir+0x93/0xd3 __do_sys_getdents64+0x6b/0xd4 This is almost certainly the actual fix for: https://bugzilla.kernel.org/show_bug.cgi?id=218496

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

17.1%