Linux Kernel nilfs2 Directory Manipulation Vulnerability

Vulnerability

A vulnerability in the Linux kernel's nilfs2 file system has been addressed, concerning directory manipulation operations. The issue arose because the directory routines nilfs_set_link() and nilfs_delete_entry() assumed that the buffer preparation function nilfs_prepare_chunk() would always succeed. This assumption proved incorrect, as nilfs_prepare_chunk() can fail due to metadata corruption, leading to unhandled errors that triggered legacy BUG_ON() checks. The vulnerability was exacerbated by improved fuzzing test reproducibility, which revealed the error handling gaps. The patch series resolves these issues by adding the necessary error handling in the affected functions, ensuring that rename operations do not inadvertently alter the modification time of directories, and addressing rename-related BUG_ON() check failures reported by syzbot.

Impact

The vulnerability could lead to unhandled errors in directory manipulation operations, causing potential metadata corruption or inconsistent file system states.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.