CVE-2022-50845
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode leak in ext4_xattr_inode_create() on an error path There is issue as follows when do setxattr with inject fault: [localhost]# fsck.ext4 -fn /dev/sda e2fsck 1.46.6-rc1 (12-Sep-2022) Pass 1: Checking inodes, blocks, and sizes Pass 2: Checking directory structure Pass 3: Checking directory connectivity Pass 4: Checking reference counts Unattached zero-length inode 15. Clear? no Unattached inode 15 Connect to /lost+found? no Pass 5: Checking group summary information /dev/sda: ********** WARNING: Filesystem still has errors ********** /dev/sda: 15/655360 files (0.0% non-contiguous), 66755/2621440 blocks This occurs in 'ext4_xattr_inode_create()'. If 'ext4_mark_inode_dirty()' fails, dropping i_nlink of the inode is needed. Or will lead to inode leak.
How to fix
- Linux Linux0f709e08caffb41bbc9b38b9a4c1bd0769794007, eab94a46560f68d4bcd15222701ced479f84f427, 9ef603086c5b796fde1c7f22a17d0fc826ba54cb, 9882601ee689975c1c0076ee65bf222a2a35e535, 322cf639b0b7f137543072c55545adab782b3a25, fdaaf45786dc8c17a72901021772520fceb18f8c, 70e5b46beba64706430a87a6d516054225e8ac8a, e4db04f7d3dbbe16680e0ded27ea2a65b10f766a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < 0f709e08caffb41bbc9b38b9a4c1bd0769794007, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < eab94a46560f68d4bcd15222701ced479f84f427, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < 9ef603086c5b796fde1c7f22a17d0fc826ba54cb, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < 9882601ee689975c1c0076ee65bf222a2a35e535, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < 322cf639b0b7f137543072c55545adab782b3a25, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < fdaaf45786dc8c17a72901021772520fceb18f8c, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < 70e5b46beba64706430a87a6d516054225e8ac8a, bd3b963b273e247e13979f98812a6e4979b5c1e4 ≤ v < e4db04f7d3dbbe16680e0ded27ea2a65b10f766a, 4.13 | 0f709e08caffb41bbc9b38b9a4c1bd0769794007, eab94a46560f68d4bcd15222701ced479f84f427, 9ef603086c5b796fde1c7f22a17d0fc826ba54cb, 9882601ee689975c1c0076ee65bf222a2a35e535, 322cf639b0b7f137543072c55545adab782b3a25, fdaaf45786dc8c17a72901021772520fceb18f8c, 70e5b46beba64706430a87a6d516054225e8ac8a, e4db04f7d3dbbe16680e0ded27ea2a65b10f766a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.