CVE-2024-26848

linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix endless loop in directory parsing If a...

CVE-2024-26848 is fixed in 4 products on 1 platform, first by CVE-2024-26848, released April 17, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
n/a

In the Linux kernel, the following vulnerability has been resolved: afs: Fix endless loop in directory parsing If a directory has a block with only ".__afsXXXX" files in it (from uncompleted silly-rename), these .__afsXXXX files are skipped but without advancing the file position in the dir_context. This leads to afs_dir_iterate() repeating the block again and again. Fix this by making the code that skips the .__afsXXXX file also manually advance the file position. The symptoms are a soft lookup: watchdog: BUG: soft lockup - CPU#3 stuck for 52s! [check:5737] ... RIP: 0010:afs_dir_iterate_block+0x39/0x1fd ... ? watchdog_timer_fn+0x1a6/0x213 ... ? asm_sysvec_apic_timer_interrupt+0x16/0x20 ? afs_dir_iterate_block+0x39/0x1fd afs_dir_iterate+0x10a/0x148 afs_readdir+0x30/0x4a iterate_dir+0x93/0xd3 __do_sys_getdents64+0x6b/0xd4 This is almost certainly the actual fix for: https://bugzilla.kernel.org/show_bug.cgi?id=218496

Where it's fixed

ProductFixed inFixReleased
Linux
kernel-azure · opensuse-leap 15.6 6.4.0-150600.8.5.4 SUSE-SU-2024:2135-1 Jun 21, 2024
kernel-azure · sles 15.6 6.4.0-150600.8.5.4 SUSE-SU-2024:2135-1 Jun 21, 2024
kernel-source-azure · opensuse-leap 15.6 6.4.0-150600.8.5.4 SUSE-SU-2024:2135-1 Jun 21, 2024
kernel-source-azure · sles 15.6 6.4.0-150600.8.5.4 SUSE-SU-2024:2135-1 Jun 21, 2024
kernel-syms-azure · opensuse-leap 15.6 6.4.0-150600.8.5.1 SUSE-SU-2024:2135-1 Jun 21, 2024
kernel-syms-azure · sles 15.6 6.4.0-150600.8.5.1 SUSE-SU-2024:2135-1 Jun 21, 2024
linux · Debian 11.6 (bullseye) 5.10.216-1 CVE-2024-26848 Apr 17, 2024
linux · Debian 12.15 (bookworm) 6.1.85-1 CVE-2024-26848 Apr 17, 2024
linux · Debian 13.5 (trixie) 6.7.12-1 CVE-2024-26848 Apr 17, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.