Wind River Support Network

HomeDefectsLIN9-8969
Fixed

LIN9-8969 : Security Advisory - linux - CVE-2019-15538

Created: Aug 26, 2019    Updated: Nov 1, 2020
Resolved Date: Oct 26, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.26
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Kernel

Description

An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.

CREATE(Triage):(User=admin) [CVE-2019-15538|https://nvd.nist.gov/vuln/detail/CVE-2019-15538]

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube