NVD Vulnerability Detail
Search Exploit, PoC
CVE-2024-42304
Summary

In the Linux kernel, the following vulnerability has been resolved:

ext4: make sure the first directory block is not a hole

The syzbot constructs a directory that has no dirblock but is non-inline,
i.e. the first directory block is a hole. And no errors are reported when
creating files in this directory in the following flow.

ext4_mknod
...
ext4_add_entry
// Read block 0
ext4_read_dirblock(dir, block, DIRENT)
bh = ext4_bread(NULL, inode, block, 0)
if (!bh && (type == INDEX || type == DIRENT_HTREE))
// The first directory block is a hole
// But type == DIRENT, so no error is reported.

After that, we get a directory block without '.' and '..' but with a valid
dentry. This may cause some code that relies on dot or dotdot (such as
make_indexed_dir()) to crash.

Therefore when ext4_read_dirblock() finds that the first directory block
is a hole report that the filesystem is corrupted and return an error to
avoid loading corrupted data from disk causing something bad.

Publication Date Aug. 17, 2024, 6:15 p.m.
Registration Date Aug. 26, 2024, 5:01 p.m.
Last Update Aug. 19, 2024, 9:59 p.m.
Related information, measures and tools
Common Vulnerabilities List

JVN Vulnerability Information
Linux の Linux Kernel における脆弱性
Title Linux の Linux Kernel における脆弱性
Summary

Linux の Linux Kernel には、不特定の脆弱性が存在します。

Possible impacts サービス運用妨害 (DoS) 状態にされる可能性があります。 
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。

Publication Date July 10, 2024, midnight
Registration Date Oct. 9, 2025, 5:49 p.m.
Last Update Oct. 9, 2025, 5:49 p.m.
Affected System
Linux
Linux Kernel 4.14.135 以上 4.15 未満
Linux Kernel 4.19.62 以上 4.19.320 未満
Linux Kernel 4.9.187 以上 4.10 未満
Linux Kernel 5.1.21 以上 5.2 未満
Linux Kernel 5.11 以上 5.15.165 未満
Linux Kernel 5.16 以上 6.1.103 未満
Linux Kernel 5.2.4 以上 5.4.282 未満
Linux Kernel 5.5 以上 5.10.224 未満
Linux Kernel 6.2 以上 6.6.44 未満
Linux Kernel 6.7 以上 6.10.3 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
1 [2025年10月09日]   掲載 Oct. 9, 2025, 10:21 a.m.