Yunlei He

O problema está relacionado ao componente f2fs do kernel do Linux, onde o sinalizador SB INLINECRYPT é desativado e reativado durante o processo f2fs remount. Se um novo arquivo for criado ou aberto durante esse período, ele pode não usar o inlinecrypt, o que pode levar à corrupção de dados se o wrappedkey v0 estiver habilitado. Isso se deve a uma condição de corrida entre duas threads, a Thread A e a Thread B, em que a Thread A desmarca o sinalizador SB INLINECRYPT e a Thread B tenta usá-lo antes que ele seja redefinido.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue is related to the handling of extent trees in the Linux kernel, which can be exploited by local users to cause a denial of service. This can be achieved through an application with multiple threads. Recommendations: For Linux kernel versions prior to 4.13, update to version 4.13 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13 Description: The issue allows local users to cause a denial of service, resulting in a NULL pointer dereference and panic. This occurs when using a noflush merge option that triggers a NULL value for a `flush cmd control` data structure. Recommendations: For versions prior to 4.13, update to version 4.13 or later to resolve the issue.