Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — nilfs2: fix kernel bug on rename operation of broken directory
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0032 25.2 —
AFFECTED
Product Versions Fixed
Linux 2ba466d74ed74f073257f86e61519cb8f8f46184 – —
Linux 2.6.30 – 4.19.318
TIMELINE
Jul 12 Reserved by Linux
Jul 29 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-41034 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix kernel bug on rename operation of broken directory
Syzbot reported that in rename directory operation on broken directory on
nilfs2, __block_write_begin_int() called to prepare block write may fail
BUG_ON check for access exceeding the folio/page size.
This is because nilfs_dotdot(), which gets parent directory reference
entry ("..") of the directory to be moved or renamed, does not check
consistency enough, and may return location exceeding folio/page size for
broken directories.
Fix this issue by checking required directory entries ("." and "..") in
the first chunk of the directory in nilfs_dotdot().
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| July 12, 2024 | Reserved | Reserved by Linux |
| July 29, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-41034 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 2ba466d74ed74f073257f86e61519cb8f8f46184 | — |
| Linux | Linux | — | 2.6.30 | 4.19.318 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-41034 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.