GSD-2023-1000405 ext4: fix bug_on in __es_tree_search caused by bad boot loader inode

ext4: fix bugon in estreesearch caused by bad boot loader inode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

GSD-2023-1000393 ext4: fix inode leak in ext4_xattr_inode_create() on an error path

ext4: fix inode leak in ext4xattrinodecreate on an error path This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-34345

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet bee...

PT-2023-34019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A potential security issue has been identified in the Linux Kernel, related to the fs/ntfs3 component. The issue concerns the lack of a null pointer check for inode operations. The actual...

PT-2023-33985 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet be...

PT-2023-33483 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system, specifically with marking an no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2023-33519 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns the ext4 journal inode having an encrypt flag. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2023-33976 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.61 through v5.15.86 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33514 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue concerns an uninitialized value in the 'ext4 evict inode' function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2023-33560

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.17 Description A potential security issue has been identified in the Linux Kernel, related to the fs/ntfs3 component. The issue concerns the lack of a null pointer check for inode operations. The actual impa...

PT-2023-34314

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A potential issue exists in the ext4 xattr inode create function, related to an inode leak on an error path. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2023-33959

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A bug was found in the es tree search function related to a bad quota inode, which may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven...

PT-2023-34326

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A bug was found in the es tree search function related to a bad quota inode, which may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven...

PT-2023-33957 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue concerns the ext4 file system. It involves checking and asserting if marking a no delete evicting inode dirty can lead to potential security vulnerabilities. The actual impact and...

PT-2023-33956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.87 Description A bug was found in the es tree search function of the ext4 file system, potentially caused by a bad boot loader inode. The actual impact and attack plausibility have not yet been proven...

PT-2023-34388

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns a fix in the Linux Kernel where an inode is used directly in RCU-walk mode. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-33524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext4 file system in the Linux Kernel. A warning is silenced when evicting an inode with dioread nolock. The actual impact and attack plausibility have not yet bee...

PT-2023-34325

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns the ext4 file system. It involves checking and asserting if marking a no delete evicting inode dirty. The actual impact and attack plausibility have not yet been proven...

PT-2023-33470

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.18 Description The issue is related to an inode leak in the ext4 xattr inode create function on an error path. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2023-34604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A bug was found in the es tree search function, caused by a bad boot loader inode. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux...