ext4: Fix fs corruption when trying to remove a non-empty directory with IO error
Summary
GSD-2022-1002123: ext4: fix fs corruption when tring to remove a non-empty directory with IO error. Affects Kernel versions < b35eb48471822a60f3dda67c57d49fd515c9a121. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ext4 package is a file system driver for the Linux Kernel. It provides support for the ext4 file system, which is commonly used in Linux distributions. The ext4 file system is known for its performance, scalability, and reliability. However, a vulnerability has been discovered in the ext4 package that can lead to file system corruption when attempting to remove a non-empty directory with an input/output (IO) error.
Vulnerability Detail
The vulnerability in the ext4 package occurs when a user tries to remove a directory that is not empty and encounters an IO error. This can happen due to various reasons, such as a hardware failure or a network issue. When this error occurs, the ext4 file system does not handle it properly, leading to file system corruption. The impact of this vulnerability can be severe, as it can result in data loss or the inability to access files and directories on the affected file system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Users are advised to update their Linux Kernel to the fixed version as soon as possible.
Conclusion
The ext4 package in the Linux Kernel is vulnerable to file system corruption when trying to remove a non-empty directory with an IO error. This vulnerability has been fixed in the Linux Kernel version v5.10.110. Users are advised to update their Linux Kernel to the fixed version to mitigate the risk of data loss or file system inaccessibility. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ext4 package is a file system driver for the Linux Kernel that provides support for the ext4 file system.
The vulnerability can lead to file system corruption, resulting in data loss or the inability to access files and directories on the affected file system.
To fix the vulnerability, users should update their Linux Kernel to version v5.10.110 or later.
There is no known workaround for this vulnerability. Updating the Linux Kernel is the recommended solution.
More information about this vulnerability can be found in the vulnerability database maintained by the Cloud Security Alliance. The specific vulnerability ID is GSD-2022-1002123.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
