f2fs: Incorrect Return Value in f2fs_sanity_check_ckpt()
Summary
GSD-2021-1002330: f2fs: fix incorrect return value in f2fs_sanity_check_ckpt(). Affects Kernel versions >= 65ddf6564843890a58ee3b18bb46ce67d96333fb, < 680a0c6332c48df1b900b3c535e920e7cc453b7e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The f2fs package is a file system designed for flash-based storage devices in the Linux kernel. It provides efficient data management and wear-leveling algorithms to optimize performance and lifespan of flash memory. The f2fs_sanity_check_ckpt() function is responsible for checking the consistency of checkpoint data in the file system. However, a vulnerability exists in this function that leads to an incorrect return value.
Vulnerability Detail
The vulnerability in f2fs_sanity_check_ckpt() arises from an incorrect return value. This issue can potentially be exploited by an attacker to manipulate the file system and cause data corruption or denial of service. The vulnerability was introduced in version v5.15 of the Linux Kernel and has been fixed in version v5.15.5 by commit 680a0c6332c48df1b900b3c535e920e7cc453b7e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The f2fs package in the Linux Kernel is vulnerable to an incorrect return value issue in the f2fs_sanity_check_ckpt() function. This vulnerability can be mitigated by updating the Linux Kernel to version v5.15.5 or later. For further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
f2fs is a file system designed for flash-based storage devices in the Linux kernel. It provides efficient data management and wear-leveling algorithms to optimize performance and lifespan of flash memory.
f2fs_sanity_check_ckpt() is a function in the f2fs package responsible for checking the consistency of checkpoint data in the file system.
This vulnerability can be exploited by an attacker to manipulate the file system and cause data corruption or denial of service.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.5 or later.
Yes, this vulnerability has been fixed in Linux Kernel version v5.15.5 by commit 680a0c6332c48df1b900b3c535e920e7cc453b7e.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
