Vulnerability in ext4: fix bug_on in __es_tree_search
Summary
GSD-2022-1002672: ext4: fix bug_on in __es_tree_search. Affects Kernel versions >= 5946d089379a35dda0e531710b48fca05446a196, < ea6ea18b3ab0c0d7fefffb3c4d27df758b1c790a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The package is responsible for managing file storage and metadata on disk. However, a vulnerability has been discovered in the __es_tree_search function of ext4, which could potentially lead to security issues.
Vulnerability Detail
The vulnerability in the __es_tree_search function of ext4 was introduced in version v3.13 of the Linux Kernel and was fixed in version v5.18.3. The vulnerability could allow an attacker to trigger a bug_on condition, leading to a denial of service or potential privilege escalation. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to update to the fixed version of the Linux Kernel to mitigate this vulnerability.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.18.3 or later. This can be done by following the update process provided by your Linux distribution or manually compiling and installing the updated kernel from the official Linux Kernel repository.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability in ext4's __es_tree_search function could potentially lead to security issues. It is important to update the Linux Kernel to version v5.18.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux Kernel, providing support for the fourth extended file system (ext4). It is responsible for managing file storage and metadata on disk.
The impact of this vulnerability is not yet proven, but it could potentially lead to a denial of service or privilege escalation.
You can use tools like Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
To update the Linux Kernel, you can follow the update process provided by your Linux distribution or manually compile and install the updated kernel from the official Linux Kernel repository.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.