ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.10.260, 5.15.211, 6.1.177, 6.6.131, 6.12.80, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with proper error handling when inline data size exceeds PAGE_SIZE. This prevents kernel panic and allows the system to continue running while properly reporting the filesystem corruption. The error is logged via ext4_error_inode(), the buffer head is released to prevent memory leak, and -EFSCORRUPTED is returned to indicate filesystem corruption.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 3462a3f0716d27af51896dc8688bcf0628fb17ee; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 636e8d85a36ab6c31aafd04ee66a69b18eebee7b; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in af25a6affeac4919e8d8c5cccc01a9d53478447e; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 65c6c30ce6362c1c684568744ea510c921a756cd; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in d4b3f370c3d8f7ce565d4a718572c9f7c12f77ed; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 823849a26af089ffc5dfdd2ae4b9d446b46a0cda; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in a7d600e04732a7d29b107c91fe3aec64cf6ce7f2; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 356227096eb66e41b23caf7045e6304877322edf
- Linux Linux
3.8
- KernelLinux
From 3.8.0 · fixed in 5.10.260; From 5.11.0 · fixed in 5.15.211; From 5.16.0 · fixed in 6.1.177; From 6.2.0 · fixed in 6.6.131; From 6.7.0 · fixed in 6.12.80; From 6.13.0 · fixed in 6.18.21; From 6.19.0 · fixed in 6.19.11
References 8
git.kernel.org
- stable/c/3462a3f0716d27af51896dc8688bcf0628fb17ee
- stable/c/636e8d85a36ab6c31aafd04ee66a69b18eebee7b
- stable/c/af25a6affeac4919e8d8c5cccc01a9d53478447e
- stable/c/65c6c30ce6362c1c684568744ea510c921a756cd
- stable/c/d4b3f370c3d8f7ce565d4a718572c9f7c12f77ed
- stable/c/823849a26af089ffc5dfdd2ae4b9d446b46a0cda
- stable/c/a7d600e04732a7d29b107c91fe3aec64cf6ce7f2
- stable/c/356227096eb66e41b23caf7045e6304877322edf