CVE-2024-39469 (GCVE-0-2024-39469)

Vulnerability from cvelistv5 – Published: 2024-06-25 14:28 – Updated: 2026-08-05 11:33
VLAI
Title
nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
Summary
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors The error handling in nilfs_empty_dir() when a directory folio/page read fails is incorrect, as in the old ext2 implementation, and if the folio/page cannot be read or nilfs_check_folio() fails, it will falsely determine the directory as empty and corrupt the file system. In addition, since nilfs_empty_dir() does not immediately return on a failed folio/page read, but continues to loop, this can cause a long loop with I/O if i_size of the directory's inode is also corrupted, causing the log writer thread to wait and hang, as reported by syzbot. Fix these issues by making nilfs_empty_dir() immediately return a false value (0) if it fails to get a directory folio/page.
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < 2ac8a2fe22bdde9eecce2a42cf5cab79333fb428 (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < 405b71f1251e5ae865f53bd27c45114e6c83bee3 (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < c77ad608df6c091fe64ecb91f41ef7cb465587f1 (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < 11a2edb70356a2202dcb7c9c189c8356ab4752cd (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < 129dcd3e7d036218db3f59c82d82004b9539ed82 (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < d18b05eda7fa77f02114f15b02c009f28ee42346 (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < 59f14875a96ef93f05b82ad3c980605f2cb444b5 (git)
Affected: 2ba466d74ed74f073257f86e61519cb8f8f46184 , < 7373a51e7998b508af7136530f3a997b286ce81c (git)
Create a notification for this product.
Linux Linux Affected: 2.6.30
Unaffected: 0 , < 2.6.30 (semver)
Unaffected: 4.19.317 , ≤ 4.19.* (semver)
Unaffected: 5.4.279 , ≤ 5.4.* (semver)
Unaffected: 5.10.221 , ≤ 5.10.* (semver)
Unaffected: 5.15.162 , ≤ 5.15.* (semver)
Unaffected: 6.1.95 , ≤ 6.1.* (semver)
Unaffected: 6.6.35 , ≤ 6.6.* (semver)
Unaffected: 6.9.5 , ≤ 6.9.* (semver)
Unaffected: 6.10 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:56:03.781Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-39469",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:07:55.313333Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:34:41.781Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/nilfs2/dir.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2ac8a2fe22bdde9eecce2a42cf5cab79333fb428",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "405b71f1251e5ae865f53bd27c45114e6c83bee3",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "c77ad608df6c091fe64ecb91f41ef7cb465587f1",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "11a2edb70356a2202dcb7c9c189c8356ab4752cd",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "129dcd3e7d036218db3f59c82d82004b9539ed82",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "d18b05eda7fa77f02114f15b02c009f28ee42346",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "59f14875a96ef93f05b82ad3c980605f2cb444b5",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            },
            {
              "lessThan": "7373a51e7998b508af7136530f3a997b286ce81c",
              "status": "affected",
              "version": "2ba466d74ed74f073257f86e61519cb8f8f46184",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/nilfs2/dir.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.30"
            },
            {
              "lessThan": "2.6.30",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.317",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.279",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.162",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.95",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.35",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.317",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.279",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.221",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.162",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.95",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.35",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.5",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\n\nThe error handling in nilfs_empty_dir() when a directory folio/page read\nfails is incorrect, as in the old ext2 implementation, and if the\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\ndetermine the directory as empty and corrupt the file system.\n\nIn addition, since nilfs_empty_dir() does not immediately return on a\nfailed folio/page read, but continues to loop, this can cause a long loop\nwith I/O if i_size of the directory\u0027s inode is also corrupted, causing the\nlog writer thread to wait and hang, as reported by syzbot.\n\nFix these issues by making nilfs_empty_dir() immediately return a false\nvalue (0) if it fails to get a directory folio/page."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached through the local `rmdir(2)`/`rename(2)` syscall path on a mounted nilfs2 filesystem, with the malicious directory state supplied by a crafted nilfs2 image (automounted removable media, loop-mounted file, or admin-mounted volume). No network protocol handler is involved in the vulnerable function itself.\nAC:L - The attacker fully controls the on-disk directory: setting a corrupt `rec_len`/alignment/inode number so `nilfs_check_folio()` deterministically fails, and setting a huge `i_size` (read unvalidated at `inode.c:412`) so `dir_pages()` yields ~2^51 iterations. Both the false \"empty\" verdict and the segctor-sem hang follow deterministically with no race, timing window, or memory-layout dependency.\nPR:L - Once the filesystem is mounted, any ordinary unprivileged local user with write access to a directory on it triggers the bug with a single `rmdir()` or `rename()` \u2014 no capability, no root, and no `CAP_SYS_ADMIN` is needed for the triggering syscall itself.\nUI:N - No action by a second user is required: on a kiosk, desktop, or embedded system with udisks2/systemd automount, inserting the crafted volume is performed by the attacker and mounting is done by a daemon, after which the attacker issues the `rmdir()` themselves.\nS:U - The damage \u2014 corrupted nilfs2 metadata and a wedged log-writer thread \u2014 stays entirely within the kernel\u0027s own security authority on the affected host; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The defect is an incorrect boolean return, not a memory-safety violation: `nilfs_check_folio()` still bounds every entry walk, and the `fail:` label in `nilfs_get_folio()` already releases the folio, so there is no out-of-bounds read, no use-after-free, and no kernel pointer or adjacent-memory disclosure.\nI:H - The false \"directory is empty\" verdict lets `nilfs_rmdir()` unlink a populated directory (`i_size = 0`, `drop_nlink()`) and lets `nilfs_rename()` overwrite one, orphaning the entire subtree and, as the fix states, corrupting the file system \u2014 silent, unauthorized destruction of stored data and metadata that the kernel then continues to operate on.\nA:H - With a corrupted `i_size` the loop performs an effectively unbounded sequence of failing reads with no `cond_resched()` or signal check while holding `ns_segctor_sem` for read and `sb_start_intwrite()`, so the segctord log writer blocks forever on `down_write()` \u2014 the syzbot hung-task hang \u2014 stalling all writeback, sync, freeze, and umount on that filesystem and panicking the box if `hung_task_panic` is set."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:33:27.521Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428"
        },
        {
          "url": "https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3"
        },
        {
          "url": "https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1"
        },
        {
          "url": "https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd"
        },
        {
          "url": "https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82"
        },
        {
          "url": "https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346"
        },
        {
          "url": "https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5"
        },
        {
          "url": "https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c"
        }
      ],
      "title": "nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-39469",
    "datePublished": "2024-06-25T14:28:55.581Z",
    "dateReserved": "2024-06-25T14:23:23.745Z",
    "dateUpdated": "2026-08-05T11:33:27.521Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-39469",
      "date": "2026-08-05",
      "epss": "0.00247",
      "percentile": "0.15968"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\\n\\nThe error handling in nilfs_empty_dir() when a directory folio/page read\\nfails is incorrect, as in the old ext2 implementation, and if the\\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\\ndetermine the directory as empty and corrupt the file system.\\n\\nIn addition, since nilfs_empty_dir() does not immediately return on a\\nfailed folio/page read, but continues to loop, this can cause a long loop\\nwith I/O if i_size of the directory\u0027s inode is also corrupted, causing the\\nlog writer thread to wait and hang, as reported by syzbot.\\n\\nFix these issues by making nilfs_empty_dir() immediately return a false\\nvalue (0) if it fails to get a directory folio/page.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: corrige el error de c\\u00e1lculo de nilfs_empty_dir() y el bucle largo en errores de E/S. El manejo de errores en nilfs_empty_dir() cuando falla la lectura de una p\\u00e1gina/folio de directorio es incorrecto, como en el antiguo ext2 implementaci\\u00f3n, y si la publicaci\\u00f3n/p\\u00e1gina no se puede leer o nilfs_check_folio() falla, determinar\\u00e1 err\\u00f3neamente que el directorio est\\u00e1 vac\\u00edo y da\\u00f1ar\\u00e1 el sistema de archivos. Adem\\u00e1s, dado que nilfs_empty_dir() no regresa inmediatamente tras una lectura fallida de un folio/p\\u00e1gina, sino que contin\\u00faa en bucle, esto puede provocar un bucle largo con E/S si i_size del inodo del directorio tambi\\u00e9n est\\u00e1 da\\u00f1ado, lo que provoca que el subproceso del escritor de registros se bloquee. espera y cuelga, seg\\u00fan lo informado por syzbot. Solucione estos problemas haciendo que nilfs_empty_dir() devuelva inmediatamente un valor falso (0) si no puede obtener una p\\u00e1gina/folio del directorio.\"}]",
      "id": "CVE-2024-39469",
      "lastModified": "2024-11-21T09:27:43.917",
      "published": "2024-06-25T15:15:15.340",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-39469\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-06-25T15:15:15.340\",\"lastModified\":\"2026-08-04T11:18:56.800\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\\n\\nThe error handling in nilfs_empty_dir() when a directory folio/page read\\nfails is incorrect, as in the old ext2 implementation, and if the\\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\\ndetermine the directory as empty and corrupt the file system.\\n\\nIn addition, since nilfs_empty_dir() does not immediately return on a\\nfailed folio/page read, but continues to loop, this can cause a long loop\\nwith I/O if i_size of the directory\u0027s inode is also corrupted, causing the\\nlog writer thread to wait and hang, as reported by syzbot.\\n\\nFix these issues by making nilfs_empty_dir() immediately return a false\\nvalue (0) if it fails to get a directory folio/page.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: corrige el error de c\u00e1lculo de nilfs_empty_dir() y el bucle largo en errores de E/S. El manejo de errores en nilfs_empty_dir() cuando falla la lectura de una p\u00e1gina/folio de directorio es incorrecto, como en el antiguo ext2 implementaci\u00f3n, y si la publicaci\u00f3n/p\u00e1gina no se puede leer o nilfs_check_folio() falla, determinar\u00e1 err\u00f3neamente que el directorio est\u00e1 vac\u00edo y da\u00f1ar\u00e1 el sistema de archivos. Adem\u00e1s, dado que nilfs_empty_dir() no regresa inmediatamente tras una lectura fallida de un folio/p\u00e1gina, sino que contin\u00faa en bucle, esto puede provocar un bucle largo con E/S si i_size del inodo del directorio tambi\u00e9n est\u00e1 da\u00f1ado, lo que provoca que el subproceso del escritor de registros se bloquee. espera y cuelga, seg\u00fan lo informado por syzbot. Solucione estos problemas haciendo que nilfs_empty_dir() devuelva inmediatamente un valor falso (0) si no puede obtener una p\u00e1gina/folio del directorio.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/nilfs2/dir.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"405b71f1251e5ae865f53bd27c45114e6c83bee3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"c77ad608df6c091fe64ecb91f41ef7cb465587f1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"11a2edb70356a2202dcb7c9c189c8356ab4752cd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"129dcd3e7d036218db3f59c82d82004b9539ed82\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"d18b05eda7fa77f02114f15b02c009f28ee42346\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"59f14875a96ef93f05b82ad3c980605f2cb444b5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2ba466d74ed74f073257f86e61519cb8f8f46184\",\"lessThan\":\"7373a51e7998b508af7136530f3a997b286ce81c\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/nilfs2/dir.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.30\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.30\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.317\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.279\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.221\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.162\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.95\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.35\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9.5\",\"lessThanOrEqual\":\"6.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T17:07:55.313333Z\",\"id\":\"CVE-2024-39469\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.30\",\"versionEndExcluding\":\"4.19.317\",\"matchCriteriaId\":\"EF5B4A8B-7656-4B90-975E-8E35F79051DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.279\",\"matchCriteriaId\":\"F4E38E58-1B9F-4DF2-AD3D-A8BEAA2959D8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.221\",\"matchCriteriaId\":\"659E1520-6345-41AF-B893-A7C0647585A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.162\",\"matchCriteriaId\":\"10A39ACC-3005-40E8-875C-98A372D1FFD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.95\",\"matchCriteriaId\":\"D435765D-2766-44F5-B319-F713A13E35CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.35\",\"matchCriteriaId\":\"6F019D15-84C0-416B-8C57-7F51B68992F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.9.5\",\"matchCriteriaId\":\"8366481F-770F-4850-9D0F-2977BD97D5C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBB4392-5FA6-4DA9-9772-8F9C750109FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"331C2F14-12C7-45D5-893D-8C52EE38EA10\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:44:34+00:00",
      "cve": "CVE-2024-39469",
      "id": "CVE-2024-39469",
      "initial_release_date": "2024-06-25T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-39469.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-25T16:55:07Z",
      "cve": "CVE-2024-39469",
      "id": "CVE-2024-39469",
      "initial_release_date": "2024-06-26T23:17:18Z",
      "product_status:known_affected": "368",
      "product_status:known_not_affected": "130",
      "product_status:recommended": "656",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2024-39469",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2024-39469.json",
      "version": "96"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T21:56:03.781Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-39469\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T17:07:55.313333Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:25.253Z\"}}], \"cna\": {\"title\": \"nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"405b71f1251e5ae865f53bd27c45114e6c83bee3\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"c77ad608df6c091fe64ecb91f41ef7cb465587f1\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"11a2edb70356a2202dcb7c9c189c8356ab4752cd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"129dcd3e7d036218db3f59c82d82004b9539ed82\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"d18b05eda7fa77f02114f15b02c009f28ee42346\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"59f14875a96ef93f05b82ad3c980605f2cb444b5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"2ba466d74ed74f073257f86e61519cb8f8f46184\", \"lessThan\": \"7373a51e7998b508af7136530f3a997b286ce81c\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/nilfs2/dir.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.6.30\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"2.6.30\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.317\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.279\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.221\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.162\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.95\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.35\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.5\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/nilfs2/dir.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/2ac8a2fe22bdde9eecce2a42cf5cab79333fb428\"}, {\"url\": \"https://git.kernel.org/stable/c/405b71f1251e5ae865f53bd27c45114e6c83bee3\"}, {\"url\": \"https://git.kernel.org/stable/c/c77ad608df6c091fe64ecb91f41ef7cb465587f1\"}, {\"url\": \"https://git.kernel.org/stable/c/11a2edb70356a2202dcb7c9c189c8356ab4752cd\"}, {\"url\": \"https://git.kernel.org/stable/c/129dcd3e7d036218db3f59c82d82004b9539ed82\"}, {\"url\": \"https://git.kernel.org/stable/c/d18b05eda7fa77f02114f15b02c009f28ee42346\"}, {\"url\": \"https://git.kernel.org/stable/c/59f14875a96ef93f05b82ad3c980605f2cb444b5\"}, {\"url\": \"https://git.kernel.org/stable/c/7373a51e7998b508af7136530f3a997b286ce81c\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\\n\\nThe error handling in nilfs_empty_dir() when a directory folio/page read\\nfails is incorrect, as in the old ext2 implementation, and if the\\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\\ndetermine the directory as empty and corrupt the file system.\\n\\nIn addition, since nilfs_empty_dir() does not immediately return on a\\nfailed folio/page read, but continues to loop, this can cause a long loop\\nwith I/O if i_size of the directory\u0027s inode is also corrupted, causing the\\nlog writer thread to wait and hang, as reported by syzbot.\\n\\nFix these issues by making nilfs_empty_dir() immediately return a false\\nvalue (0) if it fails to get a directory folio/page.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.317\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.279\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.221\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.162\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.95\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.35\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.5\", \"versionStartIncluding\": \"2.6.30\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"2.6.30\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-11T20:21:08.677Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-39469\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-11T20:21:08.677Z\", \"dateReserved\": \"2024-06-25T14:23:23.745Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-06-25T14:28:55.581Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.