Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: Always check inode size of inline inodes Check if the inode size of stuffed (inline) inodes is within the allowed range when reading inodes from disk (gfs2_dinode_in()). This prevents us from on-disk corruption. The two checks in stuffed_readpage() and gfs2_unstuffer_page() that just truncate inline data to the maximum allowed size don't actually make sense, and they can be removed now as well.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b3b94faa5fe5968827ba0640ee9fba4b3e7f736e to < 45df749f827c286adbc951f2a4865b67f0442ba9affectedb3b94faa5fe5968827ba0640ee9fba4b3e7f736e to < 4d4cb76636134bf9a0c9c3432dae936f99954586affectedb3b94faa5fe5968827ba0640ee9fba4b3e7f736e to < 7c414f6f06e9a3934901b6edc3177ae5a1e07094affectedb3b94faa5fe5968827ba0640ee9fba4b3e7f736e to < 46c9088cabd4d0469fdb61ac2a9c5003057fe94daffectedb3b94faa5fe5968827ba0640ee9fba4b3e7f736e to < d458a0984429c2d47e60254f5bc4119cbafe83a2affectedb3b94faa5fe5968827ba0640ee9fba4b3e7f736e to < 70376c7ff31221f1d21db5611d8209e677781d3aaffected
Linux Linux
Default version status: affected
2.6.19affected0 to < 2.6.19unaffected4.19.280 to ≤ 4.19.*unaffected5.4.240 to ≤ 5.4.*unaffected5.10.177 to ≤ 5.10.*unaffected5.15.93 to ≤ 5.15.*unaffected6.1.11 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/45df749f827c286adbc951f2a4865b67f0442ba9 ↗
- https://git.kernel.org/stable/c/4d4cb76636134bf9a0c9c3432dae936f99954586 ↗
- https://git.kernel.org/stable/c/7c414f6f06e9a3934901b6edc3177ae5a1e07094 ↗
- https://git.kernel.org/stable/c/46c9088cabd4d0469fdb61ac2a9c5003057fe94d ↗
- https://git.kernel.org/stable/c/d458a0984429c2d47e60254f5bc4119cbafe83a2 ↗
- https://git.kernel.org/stable/c/70376c7ff31221f1d21db5611d8209e677781d3a ↗