ocfs2: dlmfs: Fix error handling of user_dlm_destroy_lock
Summary
GSD-2022-1003840: ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock. Affects Kernel versions < 733a35c00ef363a1c774d7ea486e0735b7c13a15. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ocfs2 package is a part of the Linux Kernel ecosystem. It provides support for the Oracle Cluster File System 2 (OCFS2), which is a shared-disk file system designed for use in cluster environments. The dlmfs component within ocfs2 is responsible for managing distributed locks. These locks are used to coordinate access to shared resources among multiple nodes in a cluster.
Vulnerability Detail
The vulnerability identified as GSD-2022-1003840 in ocfs2:dmlfs allows an attacker to cause a denial-of-service (DoS) condition by exploiting an error handling issue in the user_dlm_destroy_lock function. By sending a specially crafted request, an attacker can trigger a null pointer dereference, leading to a kernel crash. This vulnerability has the potential to disrupt the availability of the affected system and may require a system reboot to recover.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The ocfs2:dmlfs vulnerability GSD-2022-1003840 can lead to a denial-of-service (DoS) condition by exploiting an error handling issue. It is recommended to update the Linux Kernel to version v4.19.247 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocfs2 is the Oracle Cluster File System 2, a shared-disk file system designed for use in cluster environments.
dlmfs is a component within ocfs2 that manages distributed locks used for coordinating access to shared resources in a cluster.
This vulnerability can lead to a denial-of-service (DoS) condition, causing the affected system to crash and potentially requiring a system reboot for recovery.
To fix this vulnerability, update the Linux Kernel to version v4.19.247 or later, which includes the necessary fix for this issue.
No specific workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
