An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-kernel | Sep 19, 2019 | Aug 25, 2019 |
| Centos_linux | — | centos-upgrade-kernel | May 13, 2020 | Aug 25, 2019 |
| Debian | debian-upgrade-linux | Sep 16, 2019 | Aug 25, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-kernelhuawei-euleros-2_0_sp5-upgrade-kernel-develhuawei-euleros-2_0_sp5-upgrade-kernel-headershuawei-euleros-2_0_sp5-upgrade-kernel-toolshuawei-euleros-2_0_sp5-upgrade-kernel-tools-libshuawei-euleros-2_0_sp5-upgrade-perfhuawei-euleros-2_0_sp5-upgrade-python-perf | Nov 19, 2019 | Aug 25, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-bpftoolhuawei-euleros-2_0_sp8-upgrade-kernelhuawei-euleros-2_0_sp8-upgrade-kernel-develhuawei-euleros-2_0_sp8-upgrade-kernel-headershuawei-euleros-2_0_sp8-upgrade-kernel-sourcehuawei-euleros-2_0_sp8-upgrade-kernel-toolshuawei-euleros-2_0_sp8-upgrade-kernel-tools-libshuawei-euleros-2_0_sp8-upgrade-perfhuawei-euleros-2_0_sp8-upgrade-python-perfhuawei-euleros-2_0_sp8-upgrade-python3-perf | Mar 23, 2020 | Aug 25, 2019 | |
| Redhat_linux | — | redhat-upgrade-kernel | May 13, 2020 | Aug 25, 2019 |
| Suse | — | suse-upgrade-cluster-md-kmp-defaultsuse-upgrade-dlm-kmp-defaultsuse-upgrade-gfs2-kmp-defaultsuse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azuresuse-upgrade-ocfs2-kmp-default | Sep 21, 2019 | Aug 25, 2019 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1026-oracleubuntu-upgrade-linux-image-4-15-0-1047-kvmubuntu-upgrade-linux-image-4-15-0-1048-raspi2ubuntu-upgrade-linux-image-4-15-0-1051-awsubuntu-upgrade-linux-image-4-15-0-1057-oemubuntu-upgrade-linux-image-4-15-0-1060-azureubuntu-upgrade-linux-image-4-15-0-1065-snapdragonubuntu-upgrade-linux-image-4-15-0-65-genericubuntu-upgrade-linux-image-4-15-0-65-generic-lpaeubuntu-upgrade-linux-image-4-15-0-65-lowlatencyubuntu-upgrade-linux-image-5-0-0-1018-awsubuntu-upgrade-linux-image-5-0-0-1019-kvmubuntu-upgrade-linux-image-5-0-0-1019-raspi2ubuntu-upgrade-linux-image-5-0-0-1020-gcpubuntu-upgrade-linux-image-5-0-0-1020-gkeubuntu-upgrade-linux-image-5-0-0-1022-azureubuntu-upgrade-linux-image-5-0-0-1023-snapdragonubuntu-upgrade-linux-image-5-0-0-31-genericubuntu-upgrade-linux-image-5-0-0-31-generic-lpaeubuntu-upgrade-linux-image-5-0-0-31-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-16-04ubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-0ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04 | Oct 1, 2019 | Aug 25, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Aug 25, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub