Linux Kernel GFS2 Inline Inode Size Validation Vulnerability

A vulnerability in the Linux kernel's GFS2 file system has been addressed, which involved improper handling of inline inodes. The issue arose because the inode size of stuffed (inline) inodes was not properly checked against allowed limits when reading inodes from disk. This oversight could lead to on-disk corruption. The vulnerability has been resolved by ensuring that the inode size is always verified, preventing potential corruption. Additionally, two redundant checks that merely truncated inline data to a maximum allowed size have been removed, as they were unnecessary.

Impact

The vulnerability could have led to on-disk corruption by allowing improper sizes of inline inodes to be read from disk without adequate validation.