194 matches found
CVE-2022-49348 ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
In the Linux kernel, the following vulnerability has been resolved: ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate The EXT4FCREPLAY bit in sbi-smountstate is used to indicate that we are in the middle of replay the fast commit journal. This was actually a mistake, since the...
CVE-2022-49343 ext4: avoid cycles in directory h-tree
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its...
CVE-2022-49343
CVE-2022-49343 (Linux kernel ext4) : A vulnerability in the ext4 filesystem’s h-tree directory structure allows cycles to exist in a directory’s h-tree, which can cause the kernel to access unallocated memory during a node split when traversing blocks. The root cause is that a corrupted filesyste...
CVE-2022-49174
In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default enabled, extents for any given inode might span across blocks from two different block group. ext4mbmarkbb only reads the bufferhead...
CVE-2022-49174 ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
In the Linux kernel, the following vulnerability has been resolved: ext4: fix ext4mbmarkbb with flexbg with fastcommit In case of flexbg feature which is by default enabled, extents for any given inode might span across blocks from two different block group. ext4mbmarkbb only reads the bufferhead...
CVE-2022-49171
CVE-2022-49171 is a Linux kernel issue in the mm/gup.c path affecting ext4. The race causes [un]pin_user_pages_remote to dirty pages without proper pre-notification to ext4, which can lead to data loss. While the root cause is classed as a bug in mm/gup.c, ext4 is particularly fragile: if another...
CVE-2022-49171 ext4: don't BUG if someone dirty pages without asking ext4 first
In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying pages without properly warning the file system in advance. A related race was noted by Jan Kara in 20181; however, more recently...
CVE-2022-49171 ext4: don't BUG if someone dirty pages without asking ext4 first
In the Linux kernel, the following vulnerability has been resolved: ext4: don't BUG if someone dirty pages without asking ext4 first unpinuserpagesremote is dirtying pages without properly warning the file system in advance. A related race was noted by Jan Kara in 20181; however, more recently...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in Linux operating systems is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6routempathnotify CVE-2024-26852 In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes underneath the filesystem...
Important: kernel-livepatch-5.10.227-219.884
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in gfs2qddealloc CVE-2023-52760 In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify CVE-2024-36899 In the...
CVE-2024-56686
In the Linux kernel, the following vulnerability has been resolved: ext4: fix race in bufferhead read fault injection When I enabled ext4 debug for fault injection testing, I encountered the following warning: EXT4-fs error device sda: ext4readinodebitmap:201: comm fsstress: Cannot read inode...
CVE-2024-56686
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-779)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-779 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-timers: Ensure timer ID search-loop limit is valid CVE-2023-53728 In the Linux kernel, the following vulnerability has...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component of the Linux operating system is related to errors in resource management within the EXT4DESCPERBLOCK function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ext4_ext_try_to_merge_up() function in the ext4 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4exttrytomergeup function in the fs/ext4/extents.c file of the Linux kernel’s ext4 file system is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2024-50191
Mode C: The CVE-2024-50191 entry concerns ext4 in the Linux kernel. The issue was that when a filesystem was mounted with errors=remount-ro, the kernel incorrectly set SB_RDONLY after errors, potentially confusing the filesystem freeze logic. The fix removes the SB_RDONLY modification and relies ...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component in the Linux operating system is related to errors in the division by zero in the mbupdateavgfragmentsize function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ext4 kernel component in the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the ext4 kernel component of the Linux operating system is related to incorrect blocking in the ext4mbtrybestfound function. Exploiting this vulnerability can allow an attacker to cause a service failure...