Description
In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_exchmaps_estimate_overhead() adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINT_MAX check still tests req->resblks. That is the reservation value from before the overhead was added. The computed value is stored back in req->resblks and later passed to xfs_trans_alloc(), whose block reservation argument is unsigned int. Check the computed reservation so the existing limit applies to the value that will be used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
966ceafc7a437105ecfe1cadb3747b2965a260ca to < c597c8580d50127fc1221b5a5b653a94d49e23e3affected966ceafc7a437105ecfe1cadb3747b2965a260ca to < a62ef2d13d6e7270dd5e88c6082bf2d0edcd5112affected966ceafc7a437105ecfe1cadb3747b2965a260ca to < 4707344b0d36d1012c8a1716e20167cd3afdd5f1affected966ceafc7a437105ecfe1cadb3747b2965a260ca to < 0a5213bbff62b51c7d4999ac8c7e11ea57d00d45affected
Linux Linux
Default version status: affected
6.10affected0 to < 6.10unaffected6.12.96 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected