ext4: Fix bug_on in ext4_writepages
Summary
GSD-2022-1003499: ext4: fix bug_on in ext4_writepages. Affects Kernel versions < 1b061af037646c9cdb0afd8a8d2f1e1c06285866. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, a vulnerability has been discovered in the ext4_writepages function, which can lead to a bug_on condition. This vulnerability affects the Linux Kernel.
Vulnerability Detail
The vulnerability in the ext4_writepages function can be exploited to trigger a bug_on condition. This can potentially lead to a denial of service (DoS) attack or system crash. The bug_on condition occurs when a specific condition is met, causing the kernel to panic and halt the system. Attackers may be able to exploit this vulnerability to disrupt the normal operation of affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest stable version.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to a bug_on condition in the ext4_writepages function. This vulnerability can be exploited to cause a denial of service or system crash. It is crucial to update the Linux Kernel to version v5.10.121 or later to mitigate this vulnerability. Regularly updating the kernel is essential to ensure the latest security patches are applied. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux kernel, providing support for the fourth extended file system (ext4). It is widely used in Linux distributions.
This vulnerability can lead to a denial of service (DoS) attack or system crash if exploited. Attackers may be able to disrupt the normal operation of affected systems.
To fix this vulnerability, update the Linux Kernel to version v5.10.121 or later. Apply the fix provided in commit 1b061af037646c9cdb0afd8a8d2f1e1c06285866.
There is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the latest stable version.
For more information, refer to the vulnerability details in the Open Source Vulnerability format or the source link provided in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.