f2fs: Fix Sanity Check on Last Xattr Entry in __f2fs_setxattr()
Summary
GSD-2021-1002781: f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr(). Affects Kernel versions < 88dedecc24763c2e0bc1e8eeb35f9f2cd785a7e5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The f2fs package is a file system designed for flash-based storage devices in the Linux kernel. It provides efficient data management and supports advanced features such as transparent compression and encryption. The __f2fs_setxattr() function is responsible for setting extended attributes (xattrs) on files in the f2fs file system.
Vulnerability Detail
The vulnerability identified as GSD-2021-1002781 in the f2fs package involves a missing sanity check on the last xattr entry in the __f2fs_setxattr() function. This oversight could potentially lead to a security issue where an attacker could manipulate the last xattr entry to cause a denial-of-service (DoS) or other malicious behavior. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The f2fs package in the Linux kernel has been found to have a vulnerability in the __f2fs_setxattr() function. This vulnerability could potentially be exploited to cause a denial-of-service (DoS) or other malicious behavior. It is advised to update the f2fs package to version v4.14.260 or newer to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The f2fs package is a file system designed for flash-based storage devices in the Linux kernel. It provides efficient data management and supports advanced features such as transparent compression and encryption.
An xattr, short for extended attribute, is a file system feature that allows users to associate metadata with files or directories beyond the standard attributes like permissions and timestamps.
__f2fs_setxattr() is a function in the f2fs package that is responsible for setting extended attributes (xattrs) on files in the f2fs file system.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could potentially lead to a denial-of-service (DoS) or other malicious behavior.
To fix this vulnerability, it is recommended to update the f2fs package to version v4.14.260 or any subsequent version that includes the fix.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
