Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() The commit c8e008b60492 ("ext4: ignore xattrs past end") introduced a refcount leak in when block_csum is false. ext4_xattr_inode_dec_ref_all() calls ext4_get_inode_loc() to get iloc.bh, but never releases it with brelse().
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
76c365fa7e2a8bb85f0190cdb4b8cdc99b2fdce3 to < dd98a5603a212ea9c96c6982ccdbcc748fdb9a56affectedf737418b6de31c962c7192777ee4018906975383 to < 153ab2c52355fbebcae622db8e7b506492c73a29affectedcf9291a3449b04688b81e32621e88de8f4314b54 to < b706d00206a9e82362a9633efbd8b5775650169baffected362a90cecd36e8a5c415966d0b75b04a0270e4dd to < 1bc1107a3a403a6d440673ed6666f7b07ef868a8affectedeb59cc31b6ea076021d14b04e7faab1636b87d0e to < 097227f1ffe1a85bc3c359f81c71e3d40e06e920affectedc8e008b60492cf6fd31ef127aea6d02fd3d314cd to < 1e6b0a69bf2c9c819255c7566e4355536d81d9cfaffectedc8e008b60492cf6fd31ef127aea6d02fd3d314cd to < f072906688933bf47fabbaf63560be03357c8298affectedc8e008b60492cf6fd31ef127aea6d02fd3d314cd to < 77d059519382bd66283e6a4e83ee186e87e7708faffected6aff941cb0f7d0c897c3698ad2e30672709135e3affected3bc6317033f365ce578eb6039445fb66162722fdaffected836e625b03a666cf93ff5be328c8cb30336db872affected5.10.237 to < 5.10.258affected5.15.181 to < 5.15.209affected6.1.135 to < 6.1.175affected6.6.88 to < 6.6.140affected6.12.24 to < 6.12.86affected5.4.293 to < 5.5affected6.13.12 to < 6.14affected6.14.3 to < 6.15affected
Linux Linux
Default version status: affected
6.15affected0 to < 6.15unaffected5.10.258 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.140 to ≤ 6.6.*unaffected6.12.86 to ≤ 6.12.*unaffected6.18.27 to ≤ 6.18.*unaffected7.0.4 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/dd98a5603a212ea9c96c6982ccdbcc748fdb9a56 ↗
- https://git.kernel.org/stable/c/153ab2c52355fbebcae622db8e7b506492c73a29 ↗
- https://git.kernel.org/stable/c/b706d00206a9e82362a9633efbd8b5775650169b ↗
- https://git.kernel.org/stable/c/1bc1107a3a403a6d440673ed6666f7b07ef868a8 ↗
- https://git.kernel.org/stable/c/097227f1ffe1a85bc3c359f81c71e3d40e06e920 ↗
- https://git.kernel.org/stable/c/1e6b0a69bf2c9c819255c7566e4355536d81d9cf ↗
- https://git.kernel.org/stable/c/f072906688933bf47fabbaf63560be03357c8298 ↗
- https://git.kernel.org/stable/c/77d059519382bd66283e6a4e83ee186e87e7708f ↗
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗