Non notée
CVE-2025-38701 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image triggered a BUG_ON in ext4_update_inline_data() when an inode had the INLINE_DATA_FL flag set but was missing the system.data extended attribute. Since this can happen due to a maiciouly fuzzed file system, we shouldn't BUG, but rather, report it as a corrupted file system. Add similar replacements of BUG_ON with EXT4_ERROR_INODE() ii ext4_create_inline_data() and ext4_inline_data_truncate().
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.17 | premières → < 6.17 | 6.17 |
| Linux 6.16 | premières → < 6.16.2 | 6.16.2 |
| Linux 6.15 | premières → < 6.15.11 | 6.15.11 |
| Linux 6.12 | premières → < 6.12.43 | 6.12.43 |
| Linux 6.6 | premières → < 6.6.103 | 6.6.103 |
| Linux 6.1 | premières → < 6.1.149 | 6.1.149 |
| Linux 5.15 | premières → < 5.15.190 | 5.15.190 |
| Linux 5.10 | premières → < 5.10.241 | 5.10.241 |
| Linux 5.4 | premières → < 5.4.297 | 5.4.297 |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux | 3.8 | Pas de correctif indiqué |
| SIMATIC CN 4100 5.0 | premières → < 5.0 | 5.0 |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → dernières | Pas de correctif indiqué |
Références
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux
Les 18283 CVE de Linux →
CVE-2026-99270
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix potential UAF in reqsk_timer_handler()
8.1
Élevée
CVE-2026-99269
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…
7.8
Élevée
CVE-2026-99261
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for…
Non notée
CVE-2026-99260
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags…
Non notée