GSD-2023-1000440 ext4: fix leaking uninitialized memory in fast-commit journal

ext4: fix leaking uninitialized memory in fast-commit journal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000439 ext4: don't set up encryption key during jbd2 transaction

ext4: don't set up encryption key during jbd2 transaction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000438 ext4: fix off-by-one errors in fast-commit block filling

ext4: fix off-by-one errors in fast-commit block filling This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000437 ext4: fix uninititialized value in 'ext4_evict_inode'

ext4: fix uninititialized value in 'ext4evictinode' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000436 ext4: fix corruption when online resizing a 1K bigalloc fs

ext4: fix corruption when online resizing a 1K bigalloc fs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000434 ext4: fix deadlock due to mbcache entry corruption

ext4: fix deadlock due to mbcache entry corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000432 ext4: fix kernel BUG in 'ext4_write_inline_data_end()'

ext4: fix kernel BUG in 'ext4writeinlinedataend' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000430 ext4: fix corrupt backup group descriptors after online resize

ext4: fix corrupt backup group descriptors after online resize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000413 ext4: fix use-after-free in ext4_orphan_cleanup

ext4: fix use-after-free in ext4orphancleanup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000410 ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode

ext4: add EXT4IGETBAD flag to prevent unexpected bad inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000408 ext4: fix bug_on in __es_tree_search caused by bad quota inode

ext4: fix bugon in estreesearch caused by bad quota inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000406 ext4: check and assert if marking an no_delete evicting inode dirty

ext4: check and assert if marking an nodelete evicting inode dirty This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000405 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode

ext4: fix bugon in estreesearch caused by bad boot loader inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000396 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline

ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000394 ext4: fix error code return to user-space in ext4_get_branch()

ext4: fix error code return to user-space in ext4getbranch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000393 ext4: fix inode leak in ext4_xattr_inode_create() on an error path

ext4: fix inode leak in ext4xattrinodecreate on an error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33483 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system, specifically with marking an no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-33518 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the ext4 file system, specifically with the fast-commit of encrypted directory operations. The actual impact and attack plausibility have not yet been proven...

PT-2023-33523 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33961 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A potential security issue has been identified in the ext4 file system. The issue is related to the handling of bad inodes. The actual impact and attack plausibility have not yet been prove...