LiveActive security incident?Get immediate response
CVE Record

CVE-2024-26696: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() Syzbot reported a hang issue in migrate_pages_batch() called by mbind() and nilfs_lookup_dirty_data_buffers() called in the log writer of nilfs2. While migrate_pages_batch() locks a folio and waits for the writeback to complete, the log writer thread that should bring the writeback to completion picks up the folio being written back in nilfs_lookup_dirty_data_buffers() that it calls for subsequent log creation and was trying to lock the folio. Thus causing a deadlock. In the first place, it is unexpected that folios/pages in the middle of writeback will be updated and become dirty. Nilfs2 adds a checksum to verify the validity of the log being written and uses it for recovery at mount, so data changes during writeback are suppressed. Since this is broken, an unclean shutdown could potentially cause recovery to fail. Investigation revealed that the root cause is that the wait for writeback completion in nilfs_page_mkwrite() is conditional, and if the backing device does not require stable writes, data may be modified without waiting. Fix these issues by making nilfs_page_mkwrite() wait for writeback to finish regardless of the stable write requirement of the backing device.

UnknownCVSS not scoredNot KEV-listedUpdated
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2024-26696 is a Linux kernel NILFS2 filesystem bug that can cause a hang during writeback and memory page migration. The kernel description also warns that data changes during writeback could make recovery fail after an unclean shutdown. Business urgency is highest for systems actually using NILFS2.

Executive priority

Prioritize normal-to-accelerated kernel patching for systems using NILFS2, especially where filesystem availability or recovery is business-critical. For environments without NILFS2, track through standard kernel maintenance.

Technical view

The issue is a deadlock between migrate_pages_batch(), called through mbind(), and the NILFS2 log writer in nilfs_lookup_dirty_data_buffers(). nilfs_page_mkwrite() conditionally waited for writeback based on stable-write requirements; the fix makes it wait regardless. Upstream stable commits are referenced for multiple maintained kernel lines.

Likely exposure

Exposure appears limited to Linux systems with NILFS2 in use or available for mounted NILFS2 filesystems. Systems not using NILFS2 are less likely to be practically exposed, based on the provided description.

Exploitation context

Syzbot reported the hang. The provided sources do not state active exploitation, and CISA KEV is false. The realistic impact described is availability loss and possible filesystem recovery failure after an unclean shutdown.

Researcher notes

No CVSS or CWE data is provided in the bundle. The root cause and fix are clearly described by the kernel CVE text. Avoid assuming broader impact beyond NILFS2 without additional vendor confirmation.

Mitigation direction

  • Update to a vendor kernel containing the referenced upstream stable NILFS2 fix.
  • Apply applicable Debian LTS kernel updates if using affected Debian LTS releases.
  • If NILFS2 is unnecessary, review vendor-supported options to reduce or remove NILFS2 exposure.
  • Monitor kernel vendor advisories for exact affected and fixed package versions.

Validation and detection

  • Inventory Linux hosts and identify NILFS2 usage or mounted NILFS2 filesystems.
  • Compare running kernel builds against vendor advisories and referenced stable commits.
  • Confirm updated kernels are deployed and active after maintenance reboot.
  • Review logs for NILFS2 hangs, writeback stalls, or recovery errors.
Prepared
Confidence
high
Sources
12

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-26696 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
2ADP providers
11Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CVECVE Program Container
CISA-ADPCISA ADP Vulnrichment
other:ssvc
Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0, 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0unaffected
LinuxLinux3.9, 0, 4.19.307, 5.4.269, 5.10.210, 5.15.149, 6.1.79, 6.6.18, 6.7.6, 6.8affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.