ext4: Fix Reserved Space Counter Leakage in Kernel
Summary
UVI-2021-1001640: ext4: fix reserved space counter leakage. Affects Kernel versions >= 51865fda28e585bdcc164474ff6438a9ccdbfada, < 9ccf35492b084ecbc916761a5c6f42599450f013. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 file system is a widely used file system in the Linux kernel. It provides features such as journaling, scalability, and support for large file systems. The reserved space counter in ext4 is responsible for keeping track of the amount of reserved space on the file system. This reserved space is used to prevent file system fragmentation and ensure efficient allocation of disk space. However, a vulnerability has been discovered in the ext4 file system that leads to a leakage of the reserved space counter. This vulnerability can potentially be exploited by an attacker to manipulate the reserved space counter and cause disk space allocation issues.
Vulnerability Detail
The vulnerability in the ext4 file system allows an attacker to leak the reserved space counter, which can lead to disk space allocation issues. By manipulating the reserved space counter, an attacker can cause the file system to incorrectly allocate disk space, potentially leading to file system fragmentation and inefficient disk usage. This vulnerability can be exploited by an attacker with local access to the system. The vulnerability was introduced in version v3.8 of the Linux kernel and has been fixed in version v5.10.71.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux kernel as mentioned in the 'how_to_fix' section.
Conclusion
The ext4 file system vulnerability, which leads to reserved space counter leakage, can be fixed by updating the Linux kernel to version v5.10.71 or later. It is important to apply this fix to prevent potential disk space allocation issues. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ext4 file system is a widely used file system in the Linux kernel. It provides features such as journaling, scalability, and support for large file systems.
The reserved space counter in ext4 is responsible for keeping track of the amount of reserved space on the file system. This reserved space is used to prevent file system fragmentation and ensure efficient allocation of disk space.
This vulnerability can be exploited by an attacker with local access to the system. By manipulating the reserved space counter, an attacker can cause the file system to incorrectly allocate disk space, potentially leading to file system fragmentation and inefficient disk usage.
This vulnerability was introduced in version v3.8 of the Linux kernel and has been fixed in version v5.10.71.
To fix this vulnerability, it is recommended to update the Linux kernel to version v5.10.71 or later. This fix can be obtained by updating the kernel package using the package manager of the Linux distribution.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
