Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ext4 file system has been addressed, which involved a warning triggered during the 'ext4_da_release_space' function. This warning occurred because the function attempted to free a block for an inode that had no reserved data blocks, indicating a mismatch in block management. The issue was reported by Syzkaller, a tool for finding bugs in kernel code.
The vulnerability could lead to kernel warnings and potential instability in the file system management.
The issue can be reproduced by creating an inode with inline data and then migrating it, which leads to a situation where the 'ext4_da_release_space' function is called to free blocks. Since the inode has no reserved data blocks, this triggers a warning about the inconsistency.
The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version where this issue has been addressed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.