ocfs2: Fix Data Corruption After Conversion from Inline Format
Summary
GSD-2021-1001802: ocfs2: fix data corruption after conversion from inline format. Affects Kernel versions >= 7ce2b16bad2cbfa3fa7bbc42c4448914f639ca47, < a3a089c241cd49b33a8cdd7fcb37cc87a086912a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ocfs2 is a file system implemented in the Linux Kernel. It is designed for use in clustered environments, providing shared storage access to multiple nodes. The ocfs2 file system supports various features such as inline data, which allows small files to be stored directly in the inode without using separate data blocks. However, a vulnerability has been discovered in ocfs2 that can lead to data corruption after the conversion from inline format.
Vulnerability Detail
The vulnerability in ocfs2 occurs during the conversion process from inline format to regular data blocks. Due to a coding error, the conversion process can result in data corruption, potentially leading to file system inconsistencies and data loss. An attacker with local access to the affected system could exploit this vulnerability to manipulate or destroy data on the ocfs2 file system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is necessary to apply the fix by updating the Linux Kernel.
Conclusion
The ocfs2 file system is vulnerable to data corruption after the conversion from inline format. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v4.19.214 or later. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocfs2 is a file system implemented in the Linux Kernel, designed for use in clustered environments.
The vulnerability can result in data corruption, file system inconsistencies, and potential data loss on ocfs2 file systems.
An attacker with local access to the affected system can exploit this vulnerability.
To fix this vulnerability, update the Linux Kernel to version v4.19.214 or later.
No, there is no known workaround. Updating the Linux Kernel is necessary to address the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
