REDHAT-BUG-1148777: Medium severity Linux Linux kernel vulnerability
A flaw was found in the way the xfsda3fixhashpath() function of the Linux kernel's XFS file system implementation ordered directory hashes under certain conditions. A local attacker could use this flaw to corrupt the file system by creating directories, potentially resulting in kernel panic.
Upstream fix:
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=c88547a8119e3b581318ab65e9b72f27f23e641d
Reproducer:
http://oss.sgi.com/cgi-bin/gitweb.cgi?p=xfs/cmds/xfstests.git;a=blob;f=src/dirhashcollide.c;h=55cec872d5061ac2ca0f56d1f11e6bf349d5bb97;hb=947ee8bd4b59770534297572b14c695e9c6e001e
References:
http://seclists.org/oss-sec/2014/q4/28 http://marc.info/?l=linux-xfs&m=139590613002926&w=2
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1148777?
The severity of REDHAT-BUG-1148777 is considered high due to potential file system corruption and risks of kernel panic.
How do I fix REDHAT-BUG-1148777?
To fix REDHAT-BUG-1148777, update to the latest patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by REDHAT-BUG-1148777?
The systems affected by REDHAT-BUG-1148777 include those running the Linux kernel and SGI XFS file system.
What kind of attack can leverage REDHAT-BUG-1148777?
A local attacker can leverage REDHAT-BUG-1148777 to create directories that corrupt the file system.
Is there a risk of data loss with REDHAT-BUG-1148777?
Yes, there is a risk of data loss with REDHAT-BUG-1148777 due to potential corruption of the file system.