Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fx68-rvxh-32hf

Опубликовано: 01 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential panic during recovery

During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic.

Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation.

Let's change as below to fix these issues:

  • remove bug_on() to avoid panic.
  • limit the loop count of block reservation to avoid potential deadloop.

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid potential panic during recovery

During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic.

Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation.

Let's change as below to fix these issues:

  • remove bug_on() to avoid panic.
  • limit the loop count of block reservation to avoid potential deadloop.

EPSS

Процентиль: 5%
0.00022
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 6.3
ubuntu
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.

CVSS3: 5.5
redhat
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.

CVSS3: 6.3
nvd
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential panic during recovery During recovery, if FAULT_BLOCK is on, it is possible that f2fs_reserve_new_block() will return -ENOSPC during recovery, then it may trigger panic. Also, if fault injection rate is 1 and only FAULT_BLOCK fault type is on, it may encounter deadloop in loop of block reservation. Let's change as below to fix these issues: - remove bug_on() to avoid panic. - limit the loop count of block reservation to avoid potential deadloop.

msrc
5 месяцев назад

f2fs: fix to avoid potential panic during recovery

CVSS3: 6.3
debian
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: f ...

EPSS

Процентиль: 5%
0.00022
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-835