UBUNTU-CVE-2019-15538
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
02 / AFFECTED SOFTWARE
Affected packages
25 explicit affected versions
6 explicit affected versions
32 explicit affected versions
14 explicit affected versions
1 explicit affected versions
37 explicit affected versions
1 explicit affected versions
1 explicit affected versions
12 explicit affected versions
1 explicit affected versions
4 explicit affected versions
10 explicit affected versions
14 explicit affected versions
12 explicit affected versions
31 explicit affected versions
1 explicit affected versions
10 explicit affected versions
23 explicit affected versions
11 explicit affected versions
33 explicit affected versions
38 explicit affected versions
51 explicit affected versions
45 explicit affected versions
1 explicit affected versions
1 explicit affected versions
15 explicit affected versions
34 explicit affected versions
26 explicit affected versions
29 explicit affected versions
58 explicit affected versions
22 explicit affected versions
15 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
05 / REFERENCES
Further evidence
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fb254aa983bf190cfd685d40c64a480a9bafaee
- https://git.kernel.org/linus/1fb254aa983bf190cfd685d40c64a480a9bafaee
- https://github.com/torvalds/linux/commit/1fb254aa983bf190cfd685d40c64a480a9bafaee
- https://lore.kernel.org/linux-xfs/20190823035528.GH1037422@magnolia/
- https://lore.kernel.org/linux-xfs/[email protected]
- https://ubuntu.com/security/CVE-2019-15538
- https://ubuntu.com/security/notices/USN-4144-1
- https://ubuntu.com/security/notices/USN-4147-1
- https://www.cve.org/CVERecord?id=CVE-2019-15538