Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlog_recover_dquot_commit_pass2() validates the recovered dquot with xfs_dqblk_verify() and, on failure, sets error = -EFSCORRUPTED and jumps to out_release. But out_release unconditionally returns 0, so the corruption error is discarded: the caller xlog_recover_items_pass2() sees success, log recovery proceeds as if the dquot were valid, and the corrupt quota buffer can be written back to disk.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 7880b1f0adef4d363f42d6bb42aab3211291351b before e506e127fcb4e2bad1045805f1740b395eea9618; affected 3581868f51a2edb027a898988b5b5a4ba379ee55 before 5b756fbb60b5d26063f46a11a3c7daa7eb616d79; affected 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 before a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d; affected 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 before 38a4dbe588bd028a07a77dc5cee62ee3ce21e87d; affected 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 before 36a31b12540c0a0a3b77a01fda86de646f2961fb; affected 9c235dfc3d3f901fe22acb20f2ab37ff39f2ce02 before e2b4a856085e9bd939bde2dee0d08b1d41babde9; affected 6.1.128 before 6.1.184; affected 6.6.17 before 6.6.153 |
| Linux / Linux | affected 6.7; unaffected 0 before 6.7; unaffected 6.1.184 through 6.1.*; unaffected 6.6.153 through 6.6.*; unaffected 6.12.105 through 6.12.*; unaffected 6.18.46 through 6.18.*; unaffected 7.1.10 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e506e127fcb4e2bad1045805f1740b395eea9618
- https://git.kernel.org/stable/c/5b756fbb60b5d26063f46a11a3c7daa7eb616d79
- https://git.kernel.org/stable/c/a233b3362a3c7bf23f5143b4ef4b17ec337fcb4d
- https://git.kernel.org/stable/c/38a4dbe588bd028a07a77dc5cee62ee3ce21e87d
- https://git.kernel.org/stable/c/36a31b12540c0a0a3b77a01fda86de646f2961fb
- https://git.kernel.org/stable/c/e2b4a856085e9bd939bde2dee0d08b1d41babde9