Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — nilfs2: fix missing cleanup on rollforward recovery error
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0025 16.8 —
AFFECTED
Product Versions Fixed
Linux 0f3e1c7f23f8a6f8224fa1d275381f6d9279ad4b – —
Linux 2.6.30 – 4.19.322
TIMELINE
Sep 11 Reserved by Linux
Sep 18 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-46781 (Linux). CVSS 7.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix missing cleanup on rollforward recovery error
In an error injection test of a routine for mount-time recovery, KASAN
found a use-after-free bug.
It turned out that if data recovery was performed using partial logs
created by dsync writes, but an error occurred before starting the log
writer to create a recovered checkpoint, the inodes whose data had been
recovered were left in the ns_dirty_files list of the nilfs object and
were not freed.
Fix this issue by cleaning up inodes that have read the recovery data if
the recovery routine fails midway before the log writer starts.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| September 11, 2024 | Reserved | Reserved by Linux |
| September 18, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-46781 (Linux). CVSS 7.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 0f3e1c7f23f8a6f8224fa1d275381f6d9279ad4b | — |
| Linux | Linux | — | 2.6.30 | 4.19.322 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-46781 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.