Description
In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in get_max_inline_xattr_value_size() Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file system is mounted, it's possible for the inode table to get corrupted. Add bounds checking to avoid reading beyond the end of allocated memory if this happens.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
67cf5b09a46f72e048501b84996f2f77bc42e947 to < 5a229d21b98d132673096710e8281ef522dab1d1affected67cf5b09a46f72e048501b84996f2f77bc42e947 to < 3d7b8fbcd2273e2b9f4c6de5ce2f4c0cd3cb1205affected67cf5b09a46f72e048501b84996f2f77bc42e947 to < 486efbbc9445dca7890a1b86adbccb88b91284b0affected67cf5b09a46f72e048501b84996f2f77bc42e947 to < 4597554b4f7b29e7fd78aa449bab648f8da4ee2caffected67cf5b09a46f72e048501b84996f2f77bc42e947 to < f22b274429e88d3dc7e79d375b56ce4f2f59f0b4affected67cf5b09a46f72e048501b84996f2f77bc42e947 to < 1d2caddbeeee56fbbc36b428c5b909c3ad88eb7faffected67cf5b09a46f72e048501b84996f2f77bc42e947 to < e780058bd75614b66882bc02620ddbd884171560affected67cf5b09a46f72e048501b84996f2f77bc42e947 to < 88a06a94942c5c0a896e9da1113a6bb29e36cbefaffected67cf5b09a46f72e048501b84996f2f77bc42e947 to < 2220eaf90992c11d888fe771055d4de330385f01affected
Linux Linux
Default version status: affected
3.8affected0 to < 3.8unaffected4.14.315 to ≤ 4.14.*unaffected4.19.283 to ≤ 4.19.*unaffected5.4.243 to ≤ 5.4.*unaffected5.10.180 to ≤ 5.10.*unaffected5.15.112 to ≤ 5.15.*unaffected6.1.29 to ≤ 6.1.*unaffected6.2.16 to ≤ 6.2.*unaffected6.3.3 to ≤ 6.3.*unaffected6.4 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5a229d21b98d132673096710e8281ef522dab1d1 ↗
- https://git.kernel.org/stable/c/3d7b8fbcd2273e2b9f4c6de5ce2f4c0cd3cb1205 ↗
- https://git.kernel.org/stable/c/486efbbc9445dca7890a1b86adbccb88b91284b0 ↗
- https://git.kernel.org/stable/c/4597554b4f7b29e7fd78aa449bab648f8da4ee2c ↗
- https://git.kernel.org/stable/c/f22b274429e88d3dc7e79d375b56ce4f2f59f0b4 ↗
- https://git.kernel.org/stable/c/1d2caddbeeee56fbbc36b428c5b909c3ad88eb7f ↗
- https://git.kernel.org/stable/c/e780058bd75614b66882bc02620ddbd884171560 ↗
- https://git.kernel.org/stable/c/88a06a94942c5c0a896e9da1113a6bb29e36cbef ↗
- https://git.kernel.org/stable/c/2220eaf90992c11d888fe771055d4de330385f01 ↗