ext4: Memory Leak in ext4_fill_super
Summary
GSD-2021-1000811: ext4: fix memory leak in ext4_fill_super. Affects Kernel versions >= ce40733ce93de402ed629762f0e912d9af187cef, < 1385b23396d511d5233b8b921ac3058b3f86a5e1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 filesystem is a widely used file system in the Linux kernel. It provides features such as journaling, scalability, and support for large file systems. The ext4_fill_super function is responsible for initializing and populating the superblock structure for ext4 filesystems. However, a memory leak vulnerability has been discovered in this function.
Vulnerability Detail
The memory leak vulnerability in ext4_fill_super allows an attacker to cause a denial-of-service condition by repeatedly mounting and unmounting a specially crafted ext4 filesystem. This can lead to exhaustion of system memory resources, resulting in system instability or crashes. The vulnerability was introduced in version v2.6.25 of the Linux kernel and is fixed in version v5.12.10.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Linux kernel.
Conclusion
The ext4 filesystem is vulnerable to a memory leak issue in the ext4_fill_super function. This vulnerability can be exploited to cause a denial-of-service condition. To mitigate the risk, it is recommended to update the Linux kernel to version v5.12.10 or later. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a widely used file system in the Linux kernel. It provides features such as journaling, scalability, and support for large file systems.
ext4_fill_super is a function in the Linux kernel responsible for initializing and populating the superblock structure for ext4 filesystems.
The vulnerability can be exploited to cause a denial-of-service condition, leading to system instability or crashes.
To fix this vulnerability, update the Linux kernel to version v5.12.10 or later.
No, there is no known workaround. Updating the Linux kernel is necessary.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
