CVE-2023-54021
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_request. Besides we should assure goal start is in range [first_data_block, blocks_count) as ext4_mb_initialize_context does. [ Added a check to make sure size is less than ar->pright; otherwise we could end up passing an underflowed value of ar->pright - size to ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on. - TYT ]
How to fix
- Linux Linux2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530, 390eee955d4de4662db5e3e9e9a9eae020432cb7, cee78217a7ae72d11c2e21e1a5263b8044489823, 3ca3005b502ca8ea87d6a344323b179b48c4e4a3, bc4a3e1d07a86ae5845321d371190244acacb2f2, c6bee8970075b256fc1b07bf4873049219380818, abb330ffaa3a0ae7ce632e28c9260b461c01f19f, b07ffe6927c75d99af534d685282ea188d9f71a6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c9de560ded61faa5b754137b7753da252391c55a ≤ v < 2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530, c9de560ded61faa5b754137b7753da252391c55a ≤ v < 390eee955d4de4662db5e3e9e9a9eae020432cb7, c9de560ded61faa5b754137b7753da252391c55a ≤ v < cee78217a7ae72d11c2e21e1a5263b8044489823, c9de560ded61faa5b754137b7753da252391c55a ≤ v < 3ca3005b502ca8ea87d6a344323b179b48c4e4a3, c9de560ded61faa5b754137b7753da252391c55a ≤ v < bc4a3e1d07a86ae5845321d371190244acacb2f2, c9de560ded61faa5b754137b7753da252391c55a ≤ v < c6bee8970075b256fc1b07bf4873049219380818, c9de560ded61faa5b754137b7753da252391c55a ≤ v < abb330ffaa3a0ae7ce632e28c9260b461c01f19f, c9de560ded61faa5b754137b7753da252391c55a ≤ v < b07ffe6927c75d99af534d685282ea188d9f71a6, 2.6.25 | 2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530, 390eee955d4de4662db5e3e9e9a9eae020432cb7, cee78217a7ae72d11c2e21e1a5263b8044489823, 3ca3005b502ca8ea87d6a344323b179b48c4e4a3, bc4a3e1d07a86ae5845321d371190244acacb2f2, c6bee8970075b256fc1b07bf4873049219380818, abb330ffaa3a0ae7ce632e28c9260b461c01f19f, b07ffe6927c75d99af534d685282ea188d9f71a6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.