Vulnerability in ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
Summary
GSD-2021-1000778: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed. Affects Kernel versions < d3b668b96ad3192c0581a248ae2f596cd054792a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system offers improved performance, scalability, and reliability compared to its predecessors. However, a vulnerability has been discovered in the ext4_es_cache_extent function, specifically when ext4_split_extent_at fails.
Vulnerability Detail
The vulnerability in ext4 arises when the ext4_es_cache_extent function encounters an error during the execution of ext4_split_extent_at. This bug can lead to potential security vulnerabilities, although the exact impact and attack plausibility have not been proven. The vulnerability has been assigned the ID GSD-2021-1000778 and is fixed in Linux Kernel version v5.10.43 by commit d3b668b96ad3192c0581a248ae2f596cd054792a.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the ext4 package in the Linux Kernel is vulnerable to a bug in the ext4_es_cache_extent function when ext4_split_extent_at fails. This vulnerability can potentially introduce security vulnerabilities in systems using the ext4 file system. It is recommended to update the Linux Kernel to version v5.10.43 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux Kernel, providing support for the fourth extended file system (ext4). It offers improved performance, scalability, and reliability compared to its predecessors.
The exact impact of this vulnerability is not yet proven. However, it has the potential to introduce security vulnerabilities in systems using the ext4 file system.
To fix this vulnerability, update your Linux Kernel to version v5.10.43 or later. Compile the updated kernel source code or install an updated kernel package provided by your system's package manager.
No specific workaround has been mentioned for this vulnerability.
You can find more information about this vulnerability in the GSD-2021-1000778 entry of the GSD Database maintained by the Cloud Security Alliance. The link to the entry is provided in the references section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
