Vulnerability in ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
Summary
GSD-2021-1000740: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed. Affects Kernel versions < 569496aa3776eea1ff0d49d0174ac1b7e861e107. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system offers improved performance, scalability, and reliability compared to its predecessors. However, a vulnerability has been discovered in the ext4_es_cache_extent function, specifically when ext4_split_extent_at fails.
Vulnerability Detail
The vulnerability in ext4 arises from a bug in the ext4_es_cache_extent function when ext4_split_extent_at fails. This bug can potentially lead to various issues, including data corruption, file system crashes, and denial of service. An attacker could exploit this vulnerability to cause a system to become unresponsive or execute arbitrary code. The vulnerability was fixed in Linux Kernel version v4.19.194 by commit 569496aa3776eea1ff0d49d0174ac1b7e861e107.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel.
Conclusion
The vulnerability in ext4, which could lead to data corruption, file system crashes, and denial of service, has been fixed in Linux Kernel version v4.19.194. It is crucial to update the Linux Kernel to the patched version to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux Kernel that provides support for the fourth extended file system (ext4). It offers improved performance, scalability, and reliability compared to its predecessors.
The vulnerability in ext4 can lead to data corruption, file system crashes, and denial of service. An attacker could exploit this vulnerability to cause a system to become unresponsive or execute arbitrary code.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.19.194 or later. This can be done by downloading the updated kernel source code from the official Linux Kernel repository and compiling it for the target system.
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel.
For more information about this vulnerability, you can refer to the vulnerability database entry at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000740.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
