Linux Kernel up to 5.5.3 Journal Size fs/ext4/block_validity.c resource consumption

entryeditHistoryDiffjsonxmlCTI

A vulnerability classified as problematic was found in Linux Kernel up to 5.5.3 (Operating System). This vulnerability affects an unknown part of the file fs/ext4/block_validity.c of the component Journal Size Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

IDCommitedUserFieldChangeRemarksModeratedReasonC
980737802/14/2020VulD...cve_nvd_summaryext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.mitre.org02/14/2020accepted100
980737702/14/2020VulD...cve_assigned1581638400mitre.org02/14/2020accepted100
980737302/14/2020VulD...cvss3_nvd_aHnist.gov02/14/2020accepted100
980737202/14/2020VulD...cvss3_nvd_iNnist.gov02/14/2020accepted100
980737102/14/2020VulD...cvss3_nvd_cNnist.gov02/14/2020accepted100
980737002/14/2020VulD...cvss3_nvd_sUnist.gov02/14/2020accepted100
980736902/14/2020VulD...cvss3_nvd_uiNnist.gov02/14/2020accepted100
980736802/14/2020VulD...cvss3_nvd_prLnist.gov02/14/2020accepted100
980736702/14/2020VulD...cvss3_nvd_acLnist.gov02/14/2020accepted100
980736602/14/2020VulD...cvss3_nvd_avLnist.gov02/14/2020accepted100
980735302/14/2020VulD...cvss2_nvd_aiCnist.gov02/14/2020accepted100
980735202/14/2020VulD...cvss2_nvd_iiNnist.gov02/14/2020accepted100
980735102/14/2020VulD...cvss2_nvd_ciNnist.gov02/14/2020accepted100
980735002/14/2020VulD...cvss2_nvd_auNnist.gov02/14/2020accepted100
980734902/14/2020VulD...cvss2_nvd_acLnist.gov02/14/2020accepted100
980734802/14/2020VulD...cvss2_nvd_avLnist.gov02/14/2020accepted100
980733802/14/2020VulD...cwe400 (denial of service)02/14/2020accepted100
980733202/14/2020VulD...typeOperating System02/14/2020accepted100
980738602/14/2020VulD...cvss3_nvd_basescore5.5nist.gov02/14/2020accepted90
980738502/14/2020VulD...cvss3_vuldb_rcX02/14/2020accepted90

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!