Description
In the Linux kernel before 4.17, a local attacker able to set attributes on an xfs filesystem could make this filesystem non-operational until the next mount by triggering an unchecked error condition during an xfs attribute change, because xfs_attr_shortform_addname in fs/xfs/libxfs/xfs_attr.c mishandles ATTR_REPLACE operations with conversion of an attr from short to long form.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://usn.ubuntu.com/3848-2/ ↗
- https://usn.ubuntu.com/3847-1/ ↗
- https://usn.ubuntu.com/3847-2/ ↗
- https://usn.ubuntu.com/3849-1/ ↗
- https://usn.ubuntu.com/3849-2/ ↗
- https://usn.ubuntu.com/3848-1/ ↗
- https://usn.ubuntu.com/3847-3/ ↗
- https://bugzilla.suse.com/show_bug.cgi?id=1105025 ↗
- http://www.securityfocus.com/bid/105753 ↗
- https://bugzilla.kernel.org/show_bug.cgi?id=199119 ↗
- https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html ↗
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7b38460dc8e4eafba06c78f8e37099d3b34d473c ↗
- https://github.com/torvalds/linux/commit/7b38460dc8e4eafba06c78f8e37099d3b34d473c ↗
- https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html ↗
- https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html ↗