ext4: Incorrect Used Inodes Report False Positive
Summary
GSD-2021-1000171: ext4: fix check to prevent false positive report of incorrect used inodes. Affects Kernel versions >= 5012284700775a4e6e3fbe7eac4c543c4874b559, < 9c61387630a54e35b96a90608aafd369ffb86f39. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux kernel. It provides support for the fourth extended file system (ext4), which is a widely used file system in Linux distributions. The ext4 file system offers improved performance, scalability, and reliability compared to its predecessors. However, a vulnerability has been identified in the ext4 driver that can lead to false positive reports of incorrect used inodes.
Vulnerability Detail
The vulnerability in the ext4 driver occurs due to a check that incorrectly reports incorrect used inodes. This can result in false positive reports, leading to confusion and potentially unnecessary actions taken by system administrators. The impact of this vulnerability is primarily on the accuracy of inode usage reporting and does not directly pose a security risk. However, it can cause unnecessary concern and resource allocation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The ext4 driver in the Linux Kernel has a vulnerability that can result in false positive reports of incorrect used inodes. While this vulnerability does not pose a direct security risk, it can cause confusion and unnecessary actions. Users should update their Linux Kernel to version v5.4.118 or later to fix the vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ext4 package is a file system driver for the Linux kernel, providing support for the ext4 file system.
The impact of this vulnerability is primarily on the accuracy of inode usage reporting, leading to false positive reports of incorrect used inodes.
No, this vulnerability does not directly pose a security risk. It primarily affects the accuracy of inode usage reporting.
To fix this vulnerability, update your Linux Kernel to version v5.4.118 or later.
No specific workaround is mentioned for this vulnerability. Updating the Linux Kernel is the recommended solution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
