Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() In that function, we round down the start position and round up the ending position. But during the calculation of @len, we use "round_up(start + len, sectorsize)", which is the rounded up end position, not the rounded up length. Which results a much larger length, and later we are still using "start + len", which is completely incorrect. Fix it by declaring a local @aligned_start and @aligned_len and use them instead.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to < 202ac9e469b78817512921c5db05cc2140e4ca43affectedbc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to < 34adc843c28e5cd1f533a1d64f51b0f756fdf945affectedbc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to < e6edde29990af8064b9d12217ec03db231ccd55daffectedbc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to < c4c136555ff90f1e2921cc42da43daac0ef9985eaffectedbc42bda22345efdb5d8b578d1b4df2c6eaa85c58 to < 9102b179512e11644fb0489ae62010a09afa199caffected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/202ac9e469b78817512921c5db05cc2140e4ca43 ↗
- https://git.kernel.org/stable/c/34adc843c28e5cd1f533a1d64f51b0f756fdf945 ↗
- https://git.kernel.org/stable/c/e6edde29990af8064b9d12217ec03db231ccd55d ↗
- https://git.kernel.org/stable/c/c4c136555ff90f1e2921cc42da43daac0ef9985e ↗
- https://git.kernel.org/stable/c/9102b179512e11644fb0489ae62010a09afa199c ↗