ext4: Fix bug in ext4_es_cache_extent as ext4_split_extent_at failed
Summary
UVI-2021-1000813: ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed. Affects Kernel versions < 48105dc98c9ca35af418746277b087cb2bc6df7c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, a vulnerability has been discovered in the ext4_es_cache_extent function, which is used to cache file extents in the extent status tree (extent tree).
Vulnerability Detail
The vulnerability in the ext4_es_cache_extent function occurs when the ext4_split_extent_at function fails. This can lead to a bug where the extent status tree is not properly updated, potentially resulting in data corruption or other file system inconsistencies. An attacker could exploit this vulnerability to manipulate file extents and cause denial of service or gain unauthorized access to sensitive information.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to a bug in the ext4_es_cache_extent function, which can result in data corruption or file system inconsistencies. The vulnerability has been fixed in Linux Kernel version v5.12.10. Users are advised to update their Linux Kernel to the latest version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux kernel, providing support for the fourth extended file system (ext4). It is widely used in Linux distributions.
The extent status tree, also known as the extent tree, is a data structure used by the ext4 file system to track file extents. It stores information about the allocation status of file blocks.
The vulnerability can lead to data corruption or other file system inconsistencies. An attacker could exploit this vulnerability to manipulate file extents and cause denial of service or gain unauthorized access to sensitive information.
To fix the vulnerability, update your Linux Kernel to version v5.12.10 or later. Download the latest kernel source code from the official Linux Kernel repository and compile it according to the provided instructions.
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
