Brian Foster

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** An issue exists in the XFS file system where a small freemap at the end of the xattr entries array can experience a size underflow during array expansion. This can result in zero-length freemap entries with a nonzero base. While the ` leaf add` function ignores zero-size entries, a separate bug in the freemap update code within ` leaf add()` fails to update entries that begin midway through a newly appended xattr entry. This can lead to the freemap containing two entries with the same base but different sizes, potentially causing ` leaf add()` to allocate xattr namevalue entries on top of the entries array, which results in data loss. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A issue in the Linux kernel has been identified where a read can race with an invalidation followed by another read, potentially replacing a folio with a higher-order folio. This can lead to a NULL pointer dereference while holding the RCU read lock. The problem occurs when a sibling entry for the new folio is encountered in the next iteration of the loop. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** linux-image-3.13.0 Linux kernel versions prior to 3.15 **Description** The issue affects the XFS implementation in the Linux kernel, where an old size value is improperly used during remote attribute replacement. This can be exploited locally to cause a denial of service, resulting in transaction overrun and data corruption, or possibly gain privileges by leveraging XFS filesystem access. **Recommendations** For linux-image-3.13.0, update to a version later than 3.13.0 to mitigate the risk. For Linux kernel versions prior to 3.15, update to version 3.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the XFS filesystem to minimize the risk of exploitation.