Skip to content

recent ext4 CVE fixes

Greg Hackmann stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest10 patches 1 replyIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/10ext4: only look at the bg_flags field if it is validfs/ext4/balloc.c fs/ext4/ialloc.c fs/ext4/mballoc.c +1 more+36 -60 replies
2/10ext4: fix check to prevent initializing reserved inodesfs/ext4/ialloc.c fs/ext4/super.c+5 -80 replies
3/10ext4: always check block group bounds in ext4_init_block_bitmap()fs/ext4/balloc.c+3 -70 replies
4/10ext4: fix false negatives *and* false positives in ext4_check_descriptors()fs/ext4/super.c+2 -20 replies
5/10ext4: add corruption check in ext4_xattr_set_entry()fs/ext4/xattr.c+14 -80 replies
6/10ext4: always verify the magic number in xattr blocksfs/ext4/xattr.c+3 -30 replies
7/10ext4: never move the system.data xattr out of the inode bodyfs/ext4/xattr.c+5 -00 replies
8/10ext4: add more inode number paranoia checksfs/ext4/ext4.h fs/ext4/inode.c fs/ext4/super.c+7 -60 replies
9/10jbd2: don't mark block as modified if the handle is out of creditsfs/jbd2/transaction.c+1 -10 replies
10/10ext4: avoid running out of journal credits when appending to an inline filefs/ext4/ext4.h fs/ext4/inline.c fs/ext4/xattr.c+3 -560 replies

Reviews trailers per patch

2 of 10 patches have a Reviewed-by or Acked-by.

PatchAndreas Dilger
1/10
2/10
3/10
4/10
5/10R-b
6/10R-b
7/10
8/10
9/10
10/10

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v1 thread

Cover letter [PATCH 3.18.y 00/10] recent ext4 CVE fixes

A batch of ext4-related CVE fixes were released to other kernels in linux-stable, but don't apply cleanly to 3.18.y. For the most part these are unmodified cherry-picks of Ben Hutchings's 3.16.y backports (exceptions are noted above my Signed-off-by).

Theodore Ts'o (10):
ext4: only look at the bg_flags field if it is valid
ext4: fix check to prevent initializing reserved inodes
ext4: always check block group bounds in ext4_init_block_bitmap()
ext4: fix false negatives *and* false positives in
ext4_check_descriptors()
ext4: add corruption check in ext4_xattr_set_entry()
ext4: always verify the magic number in xattr blocks
ext4: never move the system.data xattr out of the inode body
ext4: add more inode number paranoia checks
jbd2: don't mark block as modified if the handle is out of credits
ext4: avoid running out of journal credits when appending to an inline
file

 fs/ext4/balloc.c      | 21 ++++++++++++-------
 fs/ext4/ext4.h        |  8 -------
 fs/ext4/ialloc.c      | 19 ++++++++++++++---
 fs/ext4/inline.c      | 38 +--------------------------------
 fs/ext4/inode.c       |  3 ++-
 fs/ext4/mballoc.c     |  6 ++++--
 fs/ext4/super.c       | 12 +++++++++--
 fs/ext4/xattr.c       | 49 ++++++++++++++++++++-----------------------
 fs/jbd2/transaction.c |  2 +-
 9 files changed, 70 insertions(+), 88 deletions(-)
Signature · 1 line
2.19.0.605.g01d371f741-goog