Bugzilla – Bug 919032
VUL-0: CVE-2015-0275: kernel: fs: ext4: fallocate zero range page size > block size BUG()
Last modified: 2017-09-20 14:44:05 UTC
OSS:2015/Q1/661 Currently there is a bug in zero range code which causes zero range calls to only allocate block aligned portion of the range, while ignoring the rest in some cases. In some cases, namely if the end of the range is past isize, we do attempt to preallocate the last nonaligned block. However this might cause kernel to BUG() in some carefully designed zero range requests on setups where page size > block size. Fix: http://www.spinics.net/lists/linux-ext4/msg47193.html References: http://www.spinics.net/lists/linux-ext4/msg47193.html https://bugzilla.redhat.com/show_bug.cgi?id=1193907 http://seclists.org/oss-sec/2015/q1/661
bugbot adjusting priority
Zero range functionality has been added in kernel 3.15-rc1. Thus the only affected branch is openSUSE-13.2. I've pushed the fix there so the bug is done from my side. Reassigning to security team for tracking.
done