ocfs2: Fix Data Corruption After Conversion from Inline Format
Summary
GSD-2021-1001958: ocfs2: fix data corruption after conversion from inline format. Affects Kernel versions >= 7ed80e77c908cbaa686529a49f8ae0060c5caee7, < 8e6bfb4f70168ddfd32fb6dc028ad52faaf1f32e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ocfs2 package is a component of the Linux Kernel ecosystem. It provides a file system implementation for the Oracle Cluster File System 2 (OCFS2). OCFS2 is a shared-disk file system designed for use with Oracle Real Application Clusters (RAC). It allows multiple nodes to concurrently access the same file system, providing high availability and scalability for Oracle databases. However, a vulnerability has been discovered in ocfs2 that can lead to data corruption after conversion from inline format.
Vulnerability Detail
The vulnerability in ocfs2 occurs during the conversion process from inline format. When this conversion takes place, data corruption can occur, potentially leading to the loss or alteration of critical information. The exact impact and attack plausibility of this vulnerability have not yet been proven. It is important to note that this vulnerability has been fixed in Linux Kernel version v4.14.253 by commit 8e6bfb4f70168ddfd32fb6dc028ad52faaf1f32e. However, it was introduced in version v4.14.204 by commit 7ed80e77c908cbaa686529a49f8ae0060c5caee7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the ocfs2 package in the Linux Kernel is vulnerable to data corruption after conversion from inline format. This vulnerability has been fixed in Linux Kernel version v4.14.253. To ensure the security and integrity of your system, it is recommended to update the Linux Kernel to the fixed version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ocfs2 is a file system implementation for the Oracle Cluster File System 2 (OCFS2), designed for use with Oracle Real Application Clusters (RAC). It provides high availability and scalability for Oracle databases.
The vulnerability can lead to data corruption after conversion from inline format, potentially resulting in the loss or alteration of critical information.
To fix this vulnerability, update the Linux Kernel to version v4.14.253 or later by pulling the latest updates from the official Linux Kernel repository.
Yes, users can apply the specific commit 8e6bfb4f70168ddfd32fb6dc028ad52faaf1f32e to their existing kernel version to fix this vulnerability.
No specific workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
