In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ext4: fix buffer_head leak in ext4_init_orphan_info<\/p>\n
ext4_init_orphan_info() reads orphan file blocks with ext4_bread()
\nand stores the returned buffer_head in oi->of_binfo[i].ob_bh.<\/p>\n
If ext4_bread() succeeds but the orphan block magic or checksum
\nvalidation fails, the function jumps to out_free. However, the old
\nout_free loop starts releasing buffers from i – 1, so the current
\nbuffer_head at index i is skipped.<\/p>\n
This leaks the buffer_head reference obtained by ext4_bread() on the
\nbad magic and bad checksum error paths.<\/p>\n
Fix this by tracking the number of successfully read buffer_heads and
\nreleasing exactly those buffer_heads on the error path.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
ext4: fix buffer_head leak in ext4_init_orphan_info<\/p>\n
ext4_init_orphan_info() reads orphan file blocks with ext4_bread()
\nand stores <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-25863","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/25863","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=25863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=25863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=25863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}