PT-2024-11166 · Unknown+3 · Qemu-Image+3
Junxiao Bi
·
Published
2021-06-05
·
Updated
2025-04-04
·
CVE-2021-47114
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to data corruption caused by the fallocate function in the Linux kernel. When fallocate punches holes out of inode size and the original isize is in the middle of the last cluster, the part from isize to the end of the cluster will be zeroed with buffer write. If writeback is kicked in at that time, it will invoke ocfs2 writepage()->block write full page(), where the pages out of inode size will be dropped, causing file corruption. The fix is to zero out eof blocks when extending the inode size. A corrupted converted image file can be easily obtained by running a specific command with qemu-image 4.2.1.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse
Qemu-Image