CVE-2026-43068

Linux kernel-də aşağıdakı zəiflik aradan qaldırılmışdır: ext4: ext4_mb_find_by_goal() funksiyasında korlanmış qrupdan blok ayrılmasının qarşısının alınması Aşağıdakı problem mövcuddur: ... EXT4-fs (mmcblk0p1): Delayed block allocation failed for inode 206 at logical offset 0 with max blocks 1 with error 117 EXT4-fs (mmcblk0p1): This should not happen!! Data will be lost EXT4-fs (mmcblk0p1): Delayed block allocation failed for inode 206 at logical offset 0 with max blocks 1 with error 117 EXT4-fs (mmcblk0p1): This should not happen!! Data will be lost EXT4-fs (mmcblk0p1): Delayed block allocation failed for inode 206 at logical offset 0 with max blocks 1 with error 117 EXT4-fs (mmcblk0p1): This should not happen!! Data will be lost EXT4-fs (mmcblk0p1): Delayed block allocation failed for inode 206 at logical offset 0 with max blocks 1 with error 117 EXT4-fs (mmcblk0p1): This should not happen!! Data will be lost EXT4-fs (mmcblk0p1): Delayed block allocation failed for inode 2243 at logical offset 0 with max blocks 1 with error 117 EXT4-fs (mmcblk0p1): This should not happen!! Data will be lost EXT4-fs (mmcblk0p1): Delayed block allocation failed for inode 2239 at logical offset 0 with max blocks 1 with error 117 EXT4-fs (mmcblk0p1): This should not happen!! Data will be lost EXT4-fs (mmcblk0p1): error count since last fsck: 1 EXT4-fs (mmcblk0p1): initial error at time 1765597433: ext4_mb_generate_buddy:760 EXT4-fs (mmcblk0p1): last error at time 1765597433: ext4_mb_generate_buddy:760 ... Loq analizine əsasən, bloklar daim korlanmış blok qrupundan tələb olunur. Bu, aşağıdakı şəkildə baş verə bilər: ext4_mb_find_by_goal ext4_mb_load_buddy ext4_mb_load_buddy_gfp ext4_mb_init_cache ext4_read_block_bitmap_nowait ext4_wait_block_bitmap ext4_validate_block_bitmap if (!grp || EXT4_MB_GRP_BBITMAP_CORRUPT(grp)) return -EFSCORRUPTED; // Loqlar yoxdur. if (err) return err; // Xəta qaytaracaq ext4_lock_group(ac->ac_sb, group); if (unlikely(EXT4_MB_GRP_BBITMAP_CORRUPT(e4b->bd_info))) // Əlçatmazdır goto out; 9008a58e5dce ("ext4: make the bitmap read routines return real error codes") commit-i birləşdirildikdən sonra, 163a203ddb36 ("ext4: mark block group as corrupt on block bitmap error") commit-i korlanmış blok qruplarından blokların ayrılması üçün real həll yolu deyildir. Çünki 'EXT4_MB_GRP_BBITMAP_CORRUPT(e4b->bd_info)' doğru olduqda, 'ext4_mb_load_buddy()' xəta qaytara bilər. Bu isə o deməkdir ki, blok ayırma prosesi uğursuz olacaq. Buna görə də, ext4_mb_load_buddy() xəta qaytardıqda blok qrupunun korlanıb-korlanmadığı yoxlanılmalıdır.