nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.16 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure If creation or finalization of a checkpoint fails due to anomalies in the checkpoint metadata on disk, a kernel warning is generated. This patch replaces the WARN_ONs by nilfs_error, so that a kernel, booted with panic_on_warn, does not panic. A nilfs_error is appropriate here to handle the abnormal filesystem condition. This also replaces the detected error codes with an I/O error so that neither of the internal error codes is returned to callers.
Références
- https://git.kernel.org/stable/c/b63026b5e13040cd5afa11769dd0d9e1504b031a
- https://git.kernel.org/stable/c/ae16440c44ae2acda6d72aff9d74eccf8967dae5
- https://git.kernel.org/stable/c/bf98be80cbe3b4e6c86c36ed00457389aca3eb15
- https://git.kernel.org/stable/c/259c0f68168ac6a598db3486597b10e74d625db0
- https://git.kernel.org/stable/c/8a18fdc5ae8e6d7ac33c6ee0a2e5f9f1414ef412
- https://git.kernel.org/stable/c/c0c3d3d3ea41cb5228ee90568bb953f9a56c3227
- https://git.kernel.org/stable/c/090fcfb6edeb9367a915b2749e2bd1f8b48d8898
- https://git.kernel.org/stable/c/5c0776b5bc31de7cd28afb558fae37a20f33602e
- https://git.kernel.org/stable/c/723ac751208f6d6540191689cfbf6c77135a7a1b
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2025-32043
- GCVE · GCVE-0-2022-50519
Avis du CERT-FR
- CERTFR-2025-AVI-1073 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2025-AVI-1032 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 2.6.30 < 4.9.331cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.10 < 4.14.296cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.15 < 4.19.262cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.218cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.148cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.74cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 5.19.16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.0 < 6.0.2
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 < b63026b5e13040cd5afa11769dd0d9e1504b031a ; affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 < ae16440c44ae2acda6d72aff9d74eccf8967dae5 ; affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 < bf98be80cbe3b4e6c86c36ed00457389aca3eb15 ; affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 < 259c0f68168ac6a598db3486597b10e74d625db0 ; affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 < 8a18fdc5ae8e6d7ac33c6ee0a2e5f9f1414ef412 ; affected 9ff05123e3bfbb1d2b68ba1d9bf1f7d1dffc1453 < c0c3d3d3ea41cb5228ee90568bb953f9a56c3227 |
| Linux · Linux | affected 2.6.30 ; unaffected 0 < 2.6.30 ; unaffected 4.9.331 ≤ 4.9.* ; unaffected 4.14.296 ≤ 4.14.* ; unaffected 4.19.262 ≤ 4.19.* ; unaffected 5.4.218 ≤ 5.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |