Description
In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_inode_loc() fails (e.g. if it returns -EFSCORRUPTED), iloc.bh will remain set to NULL. Since ext4_xattr_inode_dec_ref_all() lacks error checking, this will lead to a null pointer dereference in ext4_raw_inode(), called right after ext4_get_inode_loc(). Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
76c365fa7e2a8bb85f0190cdb4b8cdc99b2fdce3 to < b72a3476f0c97d02f63a6e9fff127348d55436f6affectedf737418b6de31c962c7192777ee4018906975383 to < 3d8d22e75f7edfa0b30ff27330fd6a1285d594c3affectedcf9291a3449b04688b81e32621e88de8f4314b54 to < 190ad0f22ba49f1101182b80e3af50ca2ddfe72faffected362a90cecd36e8a5c415966d0b75b04a0270e4dd to < b5d942922182e82724b7152cb998f540132885ecaffectedeb59cc31b6ea076021d14b04e7faab1636b87d0e to < 5b154e901fda2e98570b8f426a481f5740097dc2affectedc8e008b60492cf6fd31ef127aea6d02fd3d314cd to < ce5f54c065a4a7cbb92787f4f140917112350142affectedc8e008b60492cf6fd31ef127aea6d02fd3d314cd to < b97cb7d6a051aa6ebd57906df0e26e9e36c26d14affected6aff941cb0f7d0c897c3698ad2e30672709135e3affected3bc6317033f365ce578eb6039445fb66162722fdaffected836e625b03a666cf93ff5be328c8cb30336db872affected5.10.237 to < 5.10.248affected5.15.181 to < 5.15.198affected6.1.135 to < 6.1.160affected6.6.88 to < 6.6.120affected6.12.24 to < 6.12.64affected5.4.293 to < 5.5affected6.13.12 to < 6.14affected6.14.3 to < 6.15affected
Linux Linux
Default version status: affected
6.15affected0 to < 6.15unaffected5.10.248 to ≤ 5.10.*unaffected5.15.198 to ≤ 5.15.*unaffected6.1.160 to ≤ 6.1.*unaffected6.6.120 to ≤ 6.6.*unaffected6.12.64 to ≤ 6.12.*unaffected6.18.3 to ≤ 6.18.*unaffected6.19 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b72a3476f0c97d02f63a6e9fff127348d55436f6 ↗
- https://git.kernel.org/stable/c/3d8d22e75f7edfa0b30ff27330fd6a1285d594c3 ↗
- https://git.kernel.org/stable/c/190ad0f22ba49f1101182b80e3af50ca2ddfe72f ↗
- https://git.kernel.org/stable/c/b5d942922182e82724b7152cb998f540132885ec ↗
- https://git.kernel.org/stable/c/5b154e901fda2e98570b8f426a481f5740097dc2 ↗
- https://git.kernel.org/stable/c/ce5f54c065a4a7cbb92787f4f140917112350142 ↗
- https://git.kernel.org/stable/c/b97cb7d6a051aa6ebd57906df0e26e9e36c26d14 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗