ocfs2: Fix Data Corruption by fallocate in Kernel
Summary
GSD-2021-1000816: ocfs2: fix data corruption by fallocate. Affects Kernel versions < 0a31dd6fd2f4e7db538fb6eb1f06973d81f8dd3b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ocfs2 package is a part of the Linux Kernel ecosystem. It is a file system designed for use with Oracle Cluster File System 2 (OCFS2). OCFS2 is a shared-disk file system that allows multiple nodes to concurrently access the same file system. It provides features like high availability, scalability, and performance for clustered environments. However, a vulnerability has been discovered in ocfs2 related to the fallocate system call.
Vulnerability Detail
The vulnerability in ocfs2 is related to the fallocate system call. This system call is used to preallocate or deallocate disk space for a file. The vulnerability allows an attacker to corrupt data by manipulating the fallocate system call. By exploiting this vulnerability, an attacker could potentially modify or delete data on the file system, leading to data loss or unauthorized access to sensitive information. The vulnerability was fixed in Linux Kernel version v5.12.10 by commit 0a31dd6fd2f4e7db538fb6eb1f06973d81f8dd3b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
The ocfs2 package in the Linux Kernel is vulnerable to data corruption through the fallocate system call. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.12.10 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocfs2 is a file system designed for use with Oracle Cluster File System 2 (OCFS2). It provides features like high availability, scalability, and performance for clustered environments.
The fallocate system call is used to preallocate or deallocate disk space for a file.
The vulnerability allows an attacker to corrupt data by manipulating the fallocate system call. This could lead to data loss or unauthorized access to sensitive information.
To fix the vulnerability, update the Linux Kernel to version v5.12.10 or later.
There is no known workaround for this vulnerability. It is essential to apply the fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
