fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 7.1.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case, truncate on fsverity file will succeed, what this check is trying to prevent.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From a4ca8102e70e10f8cfa63d922468d21500f3c090 · fixed in 3f3b0898557a93122a7f941e6a89adef2bb29ce4; From cc99c58f735bc55e6321f1f575ea218da91dcc4c · fixed in fd4ed50c134fd9f2334b8b29d117f3af5fe250e9; From 2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec · fixed in b4c0c41b952c21baed3f822eab508ebbd1d355d9; From e9734653c523c744f03333ece6ae7a315187f05c · fixed in 2d2b2ed7bdcc6df4942292318c5455b5e94ba525; From e9734653c523c744f03333ece6ae7a315187f05c · fixed in d2f96bcb89d36d488a10e3bcf819b98536968286
- Linux Linux
7.0
- KernelLinux
From 7.0.0 · fixed in 7.1.9