PT-2022-35920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-35372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description A potential memory leak was identified in the ext4 fc record modified inode function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-34922

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue concerns a potential out of bound read in the ext4 fc replay scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-35562 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the ext4 file system, where a crash can occur when inline data creation follows a DIO write. The actual impact and attack plausibility have not yet been proven...

PT-2022-35138 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a potential crash in the ext4 file system when inline data creation follows a DIO write. The actual impact and attack plausibility have not yet been proven...

PT-2022-35370 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential memory leak was identified in the ext4 fc record regions function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-35921

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.331 Description The issue is related to a potential crash in the ext4 file system when inline data creation follows a DIO write. The actual impact and attack plausibility have not yet been proven...

PT-2022-35564 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10.137 through v5.10.149 Description: A potential security issue exists due to an incorrect check for a block being out of directory size in the ext4 filesystem. The actual impact and attack plausibility have not yet...

PT-2022-35787 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: A null pointer dereference issue was discovered in the ext4 write info function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-34926

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.6 Description The issue is related to the ext4 file system in the Linux Kernel. It introduces a helper called EXT4 FC TAG BASE LEN. The actual impact and attack plausibility of this issue have not yet been...

PT-2022-35379 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.61 through v5.15.74 Description: A potential security issue has been identified in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version...

PT-2022-34925 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to the ext4 file system, specifically with the function ext4 fc get tl. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

kernel: ext4: fix bug_on ext4_mb_use_inode_pa

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon ext4mbuseinodepa Hulk Robot reported a BUGON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! ... RIP: 0010:ext4mbmarkdiskspaceused.cold+0x85/0x136f ... Cal...

kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image

A use-after-free flaw was found in fs/ext4/namei.c:dxinsertblock in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service...

kernel: ext4: add reserved GDT blocks check

A flaw was found in the ext4 module in the Linux kernel. Resizing a corrupt ext4 image can cause a NULL pointer dereference due to a missing check if the reserved GDT blocks is zero when the resizeinode feature is disabled, resulting in a denial of service...

kernel: ext4: avoid cycles in directory h-tree

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid cycles in directory h-tree A maliciously corrupted filesystem can contain cycles in the h-tree stored inside a directory. That can easily lead to the kernel corrupting tree nodes that were already verified under its...

kernel: ext4: fix bug_on in ext4_writepages

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in ext4writepages we got issue as follows: EXT4-fs error device loop0: ext4mbgeneratebuddy:1141: group 0, block bitmap and bg descriptor inconsistent: 25 vs 31513 free cls ------------ cut here ------------ kernel...

kernel: ext4: fix use-after-free in ext4_rename_dir_prepare

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4renamedirprepare We got issue as follows: EXT4-fs loop0: mounted filesystem without journal. Opts: ,errors=continue ext4getfirstdirblock: bh-bdata=0xffff88810bee6000 len=34478 ext4getfirstdirblock:...

kernel: use-after-free and memory errors in ext4 when mounting and operating on a corrupted image

A use-after-free flaw was found in fs/ext4/namei.c:dxinsertblock in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service...

RLSA-2022:7720 Moderate: e2fsprogs security and bug fix update

The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems. Security Fixes: e2fsprogs: out-of-bounds read/write via crafted filesystem CVE-2022-1304 For more details about the security issues, including the impact, ...