[SRU Impish,Hirsute,HWE-5.11,OEM-5.10,Focal,Bionic] CVE-2021-4155

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Thu Jan 20 14:31:27 UTC 2022


[Impact]
Unprivileged users may leak filesystem data.

[Fix]
Always use XFS_BMAPI_PREALLOC when calling xfs_alloc_file_space.
Focal and Bionic backports simply did that as xfs_ioc_space has changed since
then.

[Test case]
Doing allocations with XFS_IOC_ALLOCSP ioctl and checking for a leak.
It was reproduced with unpatched kernels.

[Potential regression]
XFS users may regress, specially when using XFS specific ioctls/tools.



More information about the kernel-team mailing list