Threats tagged 'ghsa-7hm7-x364-qr2m'

CVE-2024-42104 is a high-severity vulnerability in the Linux kernel's nilfs2 filesystem. It involves a missing check for inode numbers on directory entries, which can cause a use-after-free condition of metadata file inodes. This flaw arises when corrupted nilfs2 filesystem images are mounted and unmounted, leading to inode link count corruption and subsequent kernel bugs. The issue is fixed by adding sanity checks to treat invalid inode numbers as errors during directory reads.