Description
In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In principle orphan file can be arbitrarily large. However orphan replay needs to traverse it all and we also pin all its buffers in memory. Thus filesystems with absurdly large orphan files can lead to big amounts of memory consumed. Limit orphan file size to a sane value and also use kvmalloc() for allocating array of block descriptor structures to avoid large order allocations for sane but large orphan files.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to < 95a21611b14ae0a401720645245a8db16f040995affected02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to < 566a1d6084563bd07433025aa23bcea4427de107affected02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to < 304fc34ff6fc8261138fd81f119e024ac3a129e9affected02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to < a2d803fab8a6c6a874277cb80156dc114db91921affected02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to < 2b9da798ff0f4d026c5f0f815047393ebe7d8859affected02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 to < 0a6ce20c156442a4ce2a404747bb0fb05d54eeb3affected
Linux Linux
Default version status: affected
5.15affected0 to < 5.15unaffected5.15.195 to ≤ 5.15.*unaffected6.1.157 to ≤ 6.1.*unaffected6.6.113 to ≤ 6.6.*unaffected6.12.54 to ≤ 6.12.*unaffected6.17.4 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/95a21611b14ae0a401720645245a8db16f040995 ↗
- https://git.kernel.org/stable/c/566a1d6084563bd07433025aa23bcea4427de107 ↗
- https://git.kernel.org/stable/c/304fc34ff6fc8261138fd81f119e024ac3a129e9 ↗
- https://git.kernel.org/stable/c/a2d803fab8a6c6a874277cb80156dc114db91921 ↗
- https://git.kernel.org/stable/c/2b9da798ff0f4d026c5f0f815047393ebe7d8859 ↗
- https://git.kernel.org/stable/c/0a6ce20c156442a4ce2a404747bb0fb05d54eeb3 ↗