Description
A flaw was found in the Linux kernel before 5.9-rc4. A failure of the file system metadata validator in XFS can cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt. This can lead to the filesystem being shutdown, or otherwise rendered inaccessible until it is remounted, leading to a denial of service. The highest threat from this vulnerability is to system availability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Kernel kernel
before 5.9-rc4affected
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f4020438fab05364018c91f7e02ebdd192085933 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14385 ↗
- https://lists.debian.org/debian-lts-announce/2020/09/msg00025.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00001.html ↗
- https://usn.ubuntu.com/4576-1/ ↗