ext4: Don't BUG if someone dirty pages without asking ext4 first
Summary
GSD-2022-1002050: ext4: don't BUG if someone dirty pages without asking ext4 first. Affects Kernel versions < 330d0e44fc5a47c27df958ecdd4693a3cb1d8b81. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the fourth extended file system (ext4) and is widely used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, a vulnerability has been discovered in the ext4 package that could potentially lead to system crashes or other unexpected behavior.
Vulnerability Detail
The vulnerability in the ext4 package allows an attacker to dirty pages without first notifying ext4. This can lead to data corruption or loss, as ext4 relies on being notified when pages are modified. The vulnerability has the potential to be exploited by an attacker with local access to the system. The impact of this vulnerability can vary depending on the specific use case and system configuration.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The ext4 package in the Linux Kernel has a vulnerability that allows an attacker to dirty pages without notifying ext4, potentially leading to data corruption or loss. It is recommended to update the Linux Kernel to version v5.10.110 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ext4 is a file system driver for the Linux Kernel that provides support for the fourth extended file system (ext4). It is widely used in Linux distributions.
The impact of this vulnerability can vary depending on the specific use case and system configuration. It could potentially lead to system crashes or data corruption.
To fix this vulnerability, users should update their Linux Kernel to version v5.10.110 or later.
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
For more information about this vulnerability, you can refer to the source link provided in the database_specific field of the vulnerability details.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
