Linux Kernel Vulnerabilities in nilfs2 for Directory Manipulation

CVE-2025-21721

Summary

The nilfs2 file system in the Linux kernel has been updated to address vulnerabilities related to directory manipulation operations. These issues arose due to inadequate error handling in the nilfs_set_link() and nilfs_delete_entry() routines, leading to potential failures during rename operations. Previous assumptions about the nilfs_prepare_chunk() function guaranteeing success were proven incorrect as failures caused by metadata corruption could trigger legacy error checks. The patches enhance stability and correctness by incorporating necessary error handling pathways, ensuring robust performance during directory operations.

References