In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with rec_…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' dir entry with rec_len == block size results in out-of-bounds read (later on, when the corrupted directory is removed). ext4_empty_dir() assumes every ext4 directory contains at least '.' and '..' as directory entries in the first data block. It first loads the '.' dir entry, performs sanity checks by calling ext4_ch…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/14da7dbecb430e35b5889da8dae7bef33173b351
- https://git.kernel.org/stable/c/52a5509ab19a5d3afe301165d9b5787bba34d842 Patch
- https://git.kernel.org/stable/c/53bc45da8d8da92ec07877f5922b130562eb4b00 Patch
- https://git.kernel.org/stable/c/89503e5eae64637d0fa2218912b54660effe7d93 Patch
- https://git.kernel.org/stable/c/ac28c5684c1cdab650a7e5065b19e91577d37a4b Patch
- https://git.kernel.org/stable/c/b47584c556444cf7acb66b26a62cbc348eb92b78 Patch
- https://git.kernel.org/stable/c/b7531a4f99c3887439d778afaf418d1a01a5f01b Patch
- https://git.kernel.org/stable/c/d5e206778e96e8667d3bde695ad372c296dc9353 Patch
- https://git.kernel.org/stable/c/e47f472a664d70a3d104a6c2a035cdff55a719b4 Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Timeline
- nvd_ingest NVD