In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
xfs: initialise args->total for parent pointer updates<\/p>\n
xfs_parent_da_args_init() builds an xfs_da_args from a zeroed
\nxfs_parent_args (kmem_cache_zalloc), leaving args->total == 0.
\nxfs_da_grow_inode_int() treats that field as a running block reservation
\nand subtracts from it; because it is an xfs_extlen_t (uint32_t), the
\nfirst attr-fork growth wraps it to ~0U. That defeats the free-space
\ncheck in xfs_alloc_space_available(), and when it coincides with an AG
\nthat has exactly zero available blocks the allocation is clamped to
\nmaxlen 0 and returns -ENOSPC, which xfs_defer_finish_noroll() escalates
\nto a filesystem shutdown.<\/p>\n
Set args->total the way the log recovery path does
\n(xfs_attri_recover_work(), xfs_attr_item.c:706), in the add and replace
\npaths that can grow the fork. Removals and lookups never grow it, so
\nthey leave the field alone, matching that switch.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
xfs: initialise args->total for parent pointer updates<\/p>\n
xfs_parent_da_args_init() builds an xfs_da_args from a zeroed
\nxfs_parent_ar<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-28983","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/28983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28983"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28983"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}