Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ext4 file system has been addressed, which was causing out-of-memory errors during inode write operations. This issue arose when the file system attempted to allocate blocks for non-extent mapped inodes using bigalloc, leading to a failure in updating the inode's size. The problem was triggered by a direct write operation that exceeded the inode's allocated size, causing a warning to be issued. The vulnerability could potentially be exploited by manipulating inode size attributes and performing write operations that exploit the file system's allocation mechanisms.
Exploitation of this vulnerability could lead to file system errors and warnings, indicating memory allocation issues that could disrupt normal file operations.
The vulnerability can be reproduced by setting an inode's size attribute to a value larger than its current allocation, then performing a write operation that exceeds the original size. This process triggers a warning about the inode's dirty state, indicating a failure in the file system's memory management during the write operation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.