GSD-2023-1000406 ext4: check and assert if marking an no_delete evicting inode dirty

ext4: check and assert if marking an nodelete evicting inode dirty This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000405 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode

ext4: fix bugon in estreesearch caused by bad boot loader inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000396 ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline

ext4: fix delayed allocation bug in ext4clumapped for bigalloc + inline This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000394 ext4: fix error code return to user-space in ext4_get_branch()

ext4: fix error code return to user-space in ext4getbranch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000393 ext4: fix inode leak in ext4_xattr_inode_create() on an error path

ext4: fix inode leak in ext4xattrinodecreate on an error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33521 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...

PT-2023-34320

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A bug exists in the ext4 file system, specifically in the ext4 clu mapped function for bigalloc and inline configurations. The actual impact and potential for exploitation have not been prov...

PT-2023-33523 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33518 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the ext4 file system, specifically with the fast-commit of encrypted directory operations. The actual impact and attack plausibility have not yet been proven...

PT-2023-34316 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the ext4 file system, specifically in the ext4 get branch function. It involves an error code return to user-space. The actual impact and attack plausibility have n...

PT-2023-33507 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.8 through v6.0.17 Description: The issue is related to corrupt backup group descriptors after an online resize in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...

PT-2023-33957 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue concerns the ext4 file system. It involves checking and asserting if marking a no delete evicting inode dirty can lead to potential security vulnerabilities. The actual impact and...

PT-2023-33517 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns leaking uninitialized memory in the fast-commit journal of the ext4 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For...

PT-2023-33524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet bee...

PT-2023-33977

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue is related to off-by-one errors in fast-commit block filling in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-33470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.18 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-33483 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system, specifically with marking an no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-34344

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2023-34343

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2023-33980

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description The issue concerns the ext4 file system, specifically with the fast-commit of encrypted directory operations. The actual impact and potential for attack have not been proven yet...