hfsplus: Prevent Corruption in Shrinking Truncate
Summary
GSD-2021-1000203: hfsplus: prevent corruption in shrinking truncate. Affects Kernel versions >= 31651c607151f1034cfb57e5a78678bea54c362b, < 97314e45aa1223a42d60256a62c5d9af54baf446. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The hfsplus package is a file system driver for the HFS+ file system, which is commonly used on macOS. It allows Linux systems to read and write to HFS+ formatted disks. The vulnerability in this package relates to a shrinking truncate operation, which can lead to data corruption.
Vulnerability Detail
The vulnerability in hfsplus occurs during a shrinking truncate operation. When a file is truncated to a smaller size, the file system should update its metadata to reflect the new size and release any blocks that are no longer needed. However, due to a flaw in the code, the metadata update may not be performed correctly, leading to corruption of the file system. This can result in data loss or the inability to access files on the affected disk.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The hfsplus package is vulnerable to data corruption during a shrinking truncate operation. To mitigate this vulnerability, it is recommended to update the Linux Kernel to version v5.12.5 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
hfsplus is a file system driver for the HFS+ file system, commonly used on macOS. It allows Linux systems to read and write to HFS+ formatted disks.
A shrinking truncate operation refers to reducing the size of a file by truncating it. This operation should update the file system metadata accordingly and release any unnecessary blocks.
The vulnerability can lead to data corruption in the hfsplus file system. This can result in data loss or the inability to access files on the affected disk.
To fix this vulnerability, update the Linux Kernel to version v5.12.5 or later. Obtain the updated kernel from the official Linux Kernel repository.
There is no known workaround for this vulnerability. It is crucial to apply the fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
