ext4: Fix File System Corruption when Removing Non-Empty Directory with IO Error
Summary
GSD-2022-1001289: ext4: fix fs corruption when tring to remove a non-empty directory with IO error. Affects Kernel versions < 988fbad2ee18c01c23cec5f66200387303246030. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 file system is a widely used file system in the Linux kernel. It provides features such as journaling, scalability, and support for large file systems. The ext4 file system is used by many Linux distributions and is the default file system for several of them. However, a vulnerability has been discovered in the ext4 file system that can lead to file system corruption when attempting to remove a non-empty directory with an input/output (IO) error.
Vulnerability Detail
The vulnerability in the ext4 file system occurs when there is an IO error while trying to remove a non-empty directory. This can happen, for example, if there is a hardware failure or a disk error. In such cases, the ext4 file system fails to handle the IO error properly, leading to file system corruption. This vulnerability can have serious consequences, as it can result in data loss or the inability to access files and directories on the affected file system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Users are advised to update their Linux Kernel to the fixed version as soon as possible.
Conclusion
The ext4 file system vulnerability that causes file system corruption when trying to remove a non-empty directory with an IO error has been fixed in the Linux Kernel version v5.17.2. Users are advised to update their Linux Kernel to the fixed version to mitigate the risk of data loss and file system inaccessibility. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ext4 file system is a widely used file system in the Linux kernel. It provides features such as journaling, scalability, and support for large file systems.
This vulnerability can lead to file system corruption, resulting in data loss or the inability to access files and directories on the affected file system.
To fix this vulnerability, users should update their Linux Kernel to version v5.17.2 or later.
There is no known workaround for this vulnerability. Updating the Linux Kernel to the fixed version is the recommended solution.
More information about this vulnerability can be found in the official Linux Kernel repository (https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
