Vulnerability in jfs: fix GPF in diFree
Summary
GSD-2021-1001345: jfs: fix GPF in diFree. Affects Kernel versions < a21e5cb1a64c904f1f0ef7b2d386fc7d2b1d2ce2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The jfs package is a component of the Linux Kernel ecosystem. It provides support for the Journaled File System (JFS) in Linux. JFS is a high-performance file system designed for use with large files and disk volumes. It offers features such as journaling, which ensures the integrity of the file system in the event of a system crash. However, a vulnerability has been discovered in the diFree function of jfs, which could lead to a General Protection Fault (GPF) in certain scenarios.
Vulnerability Detail
The vulnerability in jfs arises from a flaw in the diFree function. This flaw can be exploited in specific circumstances to trigger a GPF, potentially leading to a denial of service or even arbitrary code execution. The impact and attack plausibility of this vulnerability have not been fully proven yet. The vulnerability has been addressed in the Linux Kernel version v5.4.133 by commit a21e5cb1a64c904f1f0ef7b2d386fc7d2b1d2ce2.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in jfs that could result in a GPF in the diFree function has been addressed in the Linux Kernel version v5.4.133. Users are advised to update their kernel to this version or later to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
jfs is a file system used in Linux that provides high-performance support for large files and disk volumes.
The diFree function is a part of jfs that is responsible for freeing disk inodes.
A General Protection Fault (GPF) is a type of exception or error that occurs when a program violates the protection rules enforced by the operating system or hardware.
The vulnerability could lead to a denial of service or arbitrary code execution, depending on how it is exploited.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Simply upload your manifest file (e.g., package-lock.json) and Vulert will analyze it for open-source vulnerabilities in real-time.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
