GSD-2023-1000394 ext4: fix error code return to user-space in ext4_get_branch()

ext4: fix error code return to user-space in ext4getbranch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000393 ext4: fix inode leak in ext4_xattr_inode_create() on an error path

ext4: fix inode leak in ext4xattrinodecreate on an error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33490 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A use-after-free issue was discovered in the ext4 orphan cleanup function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2023-33524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet bee...

PT-2023-33507 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.8 through v6.0.17 Description: The issue is related to corrupt backup group descriptors after an online resize in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...

PT-2023-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33518 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the ext4 file system, specifically with the fast-commit of encrypted directory operations. The actual impact and attack plausibility have not yet been proven...

PT-2023-34316 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue is related to the ext4 file system, specifically in the ext4 get branch function. It involves an error code return to user-space. The actual impact and attack plausibility have n...

PT-2023-33473 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A bug exists in the ext4 file system, specifically in the ext4 clu mapped function for bigalloc and inline configurations. The actual impact and potential for attack have not been proven yet...

PT-2023-34341 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns the ext4 file system, specifically with fast-commit of encrypted directory operations. It was introduced in version v5.10 and fixed in version v5.10.163. The actual impa...

PT-2023-33519 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the ext4 journal inode having an encrypt flag. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33949 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: A bug exists in the ext4 file system, specifically in the ext4 clu mapped function when used with bigalloc and inline features. The actual impact and potential for exploitation have not bee...

PT-2023-33521 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the initialization of fsdata in the pagecache write function in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...

PT-2023-33985 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet be...

PT-2023-33523 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns undefined behavior in bit shift for ext4 check flag values. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33471 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an error code return to user-space in the ext4 get branch function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33483 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system, specifically with marking an no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-33511 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v4.6 through v6.0.17 Description: The issue is related to a deadlock caused by mbcache entry corruption in the ext4 filesystem. The actual impact and potential for attack have not been proven yet. Recommendations: For...

PT-2023-33516 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: A potential security issue exists where the ext4 file system does not properly set up an encryption key during a jbd2 transaction. The actual impact and attack plausibility have not yet been...

PT-2023-33957 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue concerns the ext4 file system. It involves checking and asserting if marking a no delete evicting inode dirty can lead to potential security vulnerabilities. The actual impact and...