ext4: correct grp validation in ext4_mb_good_group (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 14 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.
Références
- https://git.kernel.org/stable/c/245759d987b617d183061db6ab8886ebb5cc78e9
- https://git.kernel.org/stable/c/3e24082f16825279054a2b8a5e668d65070bbf07
- https://git.kernel.org/stable/c/772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d
- https://git.kernel.org/stable/c/83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4
- https://git.kernel.org/stable/c/e69d665987db0e37896adf78a7e718f9a0a75d3f
- https://git.kernel.org/stable/c/a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93
Références européennes
- ENISA EUVD · EUVD-2023-60135
- GCVE · GCVE-0-2023-53861
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 100c0ad6c04597fefeaaba2bb1827cc015d95067 < 245759d987b617d183061db6ab8886ebb5cc78e9 ; affected 620a3c28221bb219b81bc0bffd065cc187494302 < 3e24082f16825279054a2b8a5e668d65070bbf07 ; affected b4319e457d6e3fb33e443efeaf4634fc36e8a9ed < 772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d ; affected 5354b2af34064a4579be8bc0e2f15a7b70f14b5f < 83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4 ; affected 5354b2af34064a4579be8bc0e2f15a7b70f14b5f < e69d665987db0e37896adf78a7e718f9a0a75d3f ; affected 5354b2af34064a4579be8bc0e2f15a7b70f14b5f < a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93 |
| Linux · Linux | affected 6.4 ; unaffected 0 < 6.4 ; unaffected 5.10.195 ≤ 5.10.* ; unaffected 5.15.132 ≤ 5.15.* ; unaffected 6.1.53 ≤ 6.1.* ; unaffected 6.4.16 ≤ 6.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |