ext2: Correct Max File Size Computing in Linux Kernel
Summary
GSD-2022-1001536: ext2: correct max file size computing. Affects Kernel versions >= 1c2d14212b15a60300a2d4f6364753e87394c521, < 9b30cc5d313b64b56ce6da7cfe30366c291a0d82. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for managing system resources, including file systems. The ext2 file system is one of the supported file systems in the Linux Kernel. It is the second extended file system and offers features such as support for large file sizes and efficient storage allocation.
However, a vulnerability has been identified in the ext2 file system implementation, which affects the maximum file size computation. This vulnerability can potentially lead to incorrect calculations of the maximum file size, resulting in unexpected behavior and potential security risks.
Vulnerability Detail
The vulnerability in the ext2 file system implementation arises from an incorrect computation of the maximum file size. When determining the maximum file size, the calculation logic contains a flaw that can lead to incorrect results. This flaw was introduced in version v5.1 of the Linux Kernel and is present until version v5.16.19.
The impact of this vulnerability can vary depending on the specific use case. In some scenarios, it may result in file size limitations being incorrectly enforced, leading to data corruption or loss. In other cases, it could potentially be exploited by malicious actors to bypass file size restrictions and perform unauthorized actions.
To address this vulnerability, the Linux Kernel developers have fixed the issue in version v5.16.19 by commit 9b30cc5d313b64b56ce6da7cfe30366c291a0d82.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ext2 file system vulnerability in the Linux Kernel, which involves incorrect computation of the maximum file size, has been identified and addressed in version v5.16.19. Users are advised to update their Linux Kernel to the fixed version or apply the necessary patches provided by their Linux distribution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ext2 file system is the second extended file system used in the Linux Kernel. It provides features such as support for large file sizes and efficient storage allocation.
This vulnerability can potentially lead to incorrect calculations of the maximum file size in the ext2 file system, which may result in unexpected behavior and potential security risks. It could be exploited by malicious actors to bypass file size restrictions and perform unauthorized actions.
This vulnerability affects versions of the Linux Kernel starting from v5.1 up to v5.16.19.
Yes, the vulnerability has been fixed in version v5.16.19 of the Linux Kernel by commit 9b30cc5d313b64b56ce6da7cfe30366c291a0d82.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.16.19 or later. Detailed instructions on updating the Linux Kernel can be found in the official documentation of the respective Linux distribution or the Linux Kernel documentation.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
