In the Linux kernel, the following vulnerability has been resolved:
ubifs: Fix races between xattr_{set|get} and listxattr operations
UBIFS may occur some problems with concurrent xattr_{set|get} and
listxattr operations, such as assertion failure, memory corruption,
stale xattr value[1].
Fix it by importing a new rw-lock in @ubifs_inode to serilize write
operations on xattr, concurrent read operations are still effective,
just like ext4.
[
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "unaffected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"fs/ubifs/super.c",
"fs/ubifs/ubifs.h",
"fs/ubifs/xattr.c"
],
"versions": [
{
"version": "1e51764a3c2a",
"lessThan": "7adc05b73d91",
"status": "affected",
"versionType": "git"
},
{
"version": "1e51764a3c2a",
"lessThan": "38dde03eb239",
"status": "affected",
"versionType": "git"
},
{
"version": "1e51764a3c2a",
"lessThan": "9558612cb829",
"status": "affected",
"versionType": "git"
},
{
"version": "1e51764a3c2a",
"lessThan": "c0756f75c221",
"status": "affected",
"versionType": "git"
},
{
"version": "1e51764a3c2a",
"lessThan": "f4e3634a3b64",
"status": "affected",
"versionType": "git"
}
]
},
{
"product": "Linux",
"vendor": "Linux",
"defaultStatus": "affected",
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"programFiles": [
"fs/ubifs/super.c",
"fs/ubifs/ubifs.h",
"fs/ubifs/xattr.c"
],
"versions": [
{
"version": "2.6.27",
"status": "affected"
},
{
"version": "0",
"lessThan": "2.6.27",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.4.133",
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.10.51",
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.12.18",
"lessThanOrEqual": "5.12.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.13.3",
"lessThanOrEqual": "5.13.*",
"status": "unaffected",
"versionType": "custom"
},
{
"version": "5.14",
"lessThanOrEqual": "*",
"status": "unaffected",
"versionType": "original_commit_for_fix"
}
]
}
]
git.kernel.org/stable/c/38dde03eb239605f428f3f1e4baa73d4933a4cc6
git.kernel.org/stable/c/7adc05b73d91a5e3d4ca7714fa53ad9b70c53d08
git.kernel.org/stable/c/9558612cb829f2c022b788f55d6b8437d5234a82
git.kernel.org/stable/c/c0756f75c22149d20fcb7d8409827cee905eb386
git.kernel.org/stable/c/f4e3634a3b642225a530c292fdb1e8a4007507f5