An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade kernel | Sep 19, 2019 | Aug 25, 2019 |
| Centos_linux | — | Upgrade kernel | May 13, 2020 | Aug 25, 2019 |
| Debian | — | Upgrade linux | Sep 16, 2019 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Nov 19, 2019 | Aug 25, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel | Mar 23, 2020 | Aug 25, 2019 |
| Redhat_linux | — | Upgrade kernel | May 13, 2020 | Aug 25, 2019 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-base | Sep 21, 2019 | Aug 25, 2019 |
| Ubuntu | — | Upgrade linux-image-5.0.0-31-lowlatencyUpgrade linux-image-5.0.0-1018-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-65-genericUpgrade linux-image-5.0.0-1019-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1047-kvmUpgrade linux-image-4.15.0-1057-oemUpgrade linux-image-azureUpgrade linux-image-4.15.0-65-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1023-snapdragonUpgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-65-lowlatencyUpgrade linux-image-4.15.0-1026-oracleUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.0.0-1020-gcpUpgrade linux-image-4.15.0-1048-raspi2Upgrade linux-image-5.0.0-1020-gkeUpgrade linux-image-4.15.0-1060-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-1051-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.0.0-31-genericUpgrade linux-image-raspi2Upgrade linux-image-gke-5.0Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-31-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1065-snapdragonUpgrade linux-image-5.0.0-1019-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1022-azure | Oct 1, 2019 | Aug 25, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub