Inode Duplication Vulnerability in Linux Kernel's nilfs2 File System

CVE-2024-53690

Summary

A vulnerability in the nilfs2 file system of the Linux kernel allows for inode duplication due to a corrupted inode bitmap. This issue occurs when a task attempts to unmount and remove directories at the same time, resulting in an underflow of the i_nlink counter during rmdir operations. The system can mistakenly treat an already deleted inode as a valid inode, causing unpredictable behavior. It is crucial to implement checks to verify that the inode is intact and not deleted before executing removal operations, ensuring system integrity.

References