Description
In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c9de560ded61faa5b754137b7753da252391c55a to < d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5baffectedc9de560ded61faa5b754137b7753da252391c55a to < ef16d8a1798db1a1604ac44ca1bd73ec6bebf483affectedc9de560ded61faa5b754137b7753da252391c55a to < 185062a21976fbc38f2efd296951b02c4500cf65affectedc9de560ded61faa5b754137b7753da252391c55a to < b0fc279de4bf17e1710bb7e83906538ff8f11111affectedc9de560ded61faa5b754137b7753da252391c55a to < 978e5e9111af18741449b81fefd531a622dd969aaffectedc9de560ded61faa5b754137b7753da252391c55a to < d87a4e4094c9879fc8acdff8ce59fdffa979c8e0affectedc9de560ded61faa5b754137b7753da252391c55a to < bf2a16eb4e6d06124bd8436d4546f61539a65f29affectedc9de560ded61faa5b754137b7753da252391c55a to < 53c14e7cc2257191ba15425c15638fc4f8abb92baffectedc9de560ded61faa5b754137b7753da252391c55a to < 463808f237cf73e98a1a45ff7460c2406a150a0baffected
Linux Linux
Default version status: affected
2.6.25affected0 to < 2.6.25unaffected4.14.315 to ≤ 4.14.*unaffected4.19.283 to ≤ 4.19.*unaffected5.4.243 to ≤ 5.4.*unaffected5.10.180 to ≤ 5.10.*unaffected5.15.112 to ≤ 5.15.*unaffected6.1.29 to ≤ 6.1.*unaffected6.2.16 to ≤ 6.2.*unaffected6.3.3 to ≤ 6.3.*unaffected6.4 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b ↗
- https://git.kernel.org/stable/c/ef16d8a1798db1a1604ac44ca1bd73ec6bebf483 ↗
- https://git.kernel.org/stable/c/185062a21976fbc38f2efd296951b02c4500cf65 ↗
- https://git.kernel.org/stable/c/b0fc279de4bf17e1710bb7e83906538ff8f11111 ↗
- https://git.kernel.org/stable/c/978e5e9111af18741449b81fefd531a622dd969a ↗
- https://git.kernel.org/stable/c/d87a4e4094c9879fc8acdff8ce59fdffa979c8e0 ↗
- https://git.kernel.org/stable/c/bf2a16eb4e6d06124bd8436d4546f61539a65f29 ↗
- https://git.kernel.org/stable/c/53c14e7cc2257191ba15425c15638fc4f8abb92b ↗
- https://git.kernel.org/stable/c/463808f237cf73e98a1a45ff7460c2406a150a0b ↗