GSD-2022-1007808 ext4: fix BUG_ON() when directory entry has invalid rec_len

ext4: fix BUGON when directory entry has invalid reclen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.8 by commit...

PT-2022-36498 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: A potential security issue has been identified in the ext4 file system, related to the ext4 da release space function. The actual impact and attack plausibility have not yet been proven...

PT-2022-36063 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system, where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and potential for exploitation have not been...

PT-2022-36333 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential issue exists in the ext4 file system where a directory entry with an invalid rec len can trigger a BUG ON condition. The actual impact and attack plausibility of this issue hav...

PT-2022-36558 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.299 Description: A potential issue has been identified in the ext4 file system, related to the 'ext4 da release space' function. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-36219 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.78 Description: A potential issue exists in the ext4 file system, where a directory entry with an invalid rec len could trigger a BUG ON condition. The actual impact and attack plausibility of this issue...

PT-2022-36064 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: A potential issue has been identified in the ext4 file system, specifically in the 'ext4 da release space' function. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-36075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.8 Description: The issue is related to the ext4 file system and its online resize functionality. It involves updating the backup superblock at the end of the online resize process. The actual impact and...

PT-2022-36601 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.333 Description: A potential security issue has been identified in the ext4 file system, related to the ext4 da release space function. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-36422 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.224 Description: A potential issue exists where a directory entry with an invalid rec len could trigger a BUG ON in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...

PT-2025-49704

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc3-next 370 Description A use-after-free issue exists in the ext4 filesystem's orphan inode cleanup routine. Specifically, when the ext4 inode attach jinode function fails with -ENOMEM during orphan cleanu...

RHEL 9 : kernel (RHSA-2022:8267)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8267 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: off-path attacker may inject data or...

Moderate: Red Hat Security Advisory: e2fsprogs security update

An update for e2fsprogs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel: ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state

A flaw was found in the ext4 module in the Linux kernel. A specially crafted filesystem can cause an assertion failure when a specific operation is performed, possibly resulting in system instability and a denial of service...

kernel: ext4: fix bug_on in ext4_writepages

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in ext4writepages we got issue as follows: EXT4-fs error device loop0: ext4mbgeneratebuddy:1141: group 0, block bitmap and bg descriptor inconsistent: 25 vs 31513 free cls ------------ cut here ------------ kernel...

kernel: ext4: fix use-after-free in ext4_rename_dir_prepare

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4renamedirprepare We got issue as follows: EXT4-fs loop0: mounted filesystem without journal. Opts: ,errors=continue ext4getfirstdirblock: bh-bdata=0xffff88810bee6000 len=34478 ext4getfirstdirblock:...

kernel: ext4: fix bug_on in __es_tree_search

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch Hulk Robot reported a BUGON: ================================================================== kernel BUG at fs/ext4/extentsstatus.c:199! ... RIP: 0010:ext4esend fs/ext4/extentsstatus.c:199 inline...

kernel: ext4: fix bug_on ext4_mb_use_inode_pa

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon ext4mbuseinodepa Hulk Robot reported a BUGON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! ... RIP: 0010:ext4mbmarkdiskspaceused.cold+0x85/0x136f ... Cal...

kernel: ext4: add reserved GDT blocks check

A flaw was found in the ext4 module in the Linux kernel. Resizing a corrupt ext4 image can cause a NULL pointer dereference due to a missing check if the reserved GDT blocks is zero when the resizeinode feature is disabled, resulting in a denial of service...

kernel: ext4: fix memory leak in parse_apply_sb_mount_options()

In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in parseapplysbmountoptions If processing the on-disk mount options fails after any memory was allocated in the ext4fscontext, e.g. sqfnames, then this memory is leaked. Fix this by calling ext4fcfree instea...