ext4: Fix bug in ext4_es_cache_extent as ext4_split_extent_at failed
Summary
GSD-2021-1000723: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed. Affects Kernel versions < 5b3a9a2be59478b013a430ac57b0f3d65471b071. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, a vulnerability has been discovered in the ext4_es_cache_extent function, which is used to cache file extents. This vulnerability can lead to a failure in the ext4_split_extent_at function, causing potential issues with file system operations.
Vulnerability Detail
The vulnerability in the ext4 package arises from a bug in the ext4_es_cache_extent function. When this function is called, it caches file extents in the extent status tree (extent tree). However, due to a coding error, the ext4_split_extent_at function may fail when trying to split an extent at a specific offset. This failure can result in incorrect file system behavior and potentially lead to data corruption or other file system-related issues. The vulnerability has been fixed in Linux Kernel version v4.9.272 by commit 5b3a9a2be59478b013a430ac57b0f3d65471b071.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to a bug in the ext4_es_cache_extent function, which can lead to failures in the ext4_split_extent_at function and potential file system issues. It is recommended to update the Linux Kernel to version v4.9.272 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ext4 package is a file system driver for the Linux kernel, providing support for the ext4 file system.
The extent status tree, or extent tree, is a data structure used by the ext4 file system to manage file extents, which represent contiguous blocks of data.
The ext4_es_cache_extent function is responsible for caching file extents in the extent status tree (extent tree) of the ext4 file system.
The ext4_split_extent_at function is used to split an extent at a specific offset in the extent status tree (extent tree) of the ext4 file system.
To update the Linux Kernel, you can apply the relevant patches or upgrade to a Linux distribution that includes the fixed version of the kernel. It is important to ensure proper testing and deployment of the updated kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
