ext4: Fix fs corruption when trying to remove a non-empty directory with IO error
Summary
GSD-2022-1001598: ext4: fix fs corruption when tring to remove a non-empty directory with IO error. Affects Kernel versions < ba8d348eae3261d80007067a74645e786891ce17. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the ext4 file system, which is commonly used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, it is susceptible to a vulnerability that can lead to file system corruption when attempting to remove a non-empty directory with an input/output (IO) error.
Vulnerability Detail
The vulnerability in ext4 arises when a user tries to delete a directory that contains files or subdirectories, but an IO error occurs during the deletion process. This can result in file system corruption, leading to data loss or other unexpected behavior. The issue has been identified and fixed in the Linux Kernel version v5.16.19 by commit ba8d348eae3261d80007067a74645e786891ce17.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to file system corruption when attempting to remove a non-empty directory with an IO error. This vulnerability has been fixed in the Linux Kernel version v5.16.19. Users are advised to update their Linux Kernel to the fixed version to mitigate the risk of data loss or unexpected behavior. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux Kernel that provides support for the ext4 file system.
The vulnerability can lead to file system corruption, potentially resulting in data loss or unexpected behavior.
You can use Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for vulnerabilities in real-time.
No, there is no known workaround for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
You can find more information about the fix in the commit ba8d348eae3261d80007067a74645e786891ce17 in the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
