group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1972281@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux - 5.4.0-113.127

---------------
linux (5.4.0-113.127) focal; urgency=medium

  * focal/linux: 5.4.0-113.127 -proposed tracker (LP: #1973980)

  * CVE-2022-29581
    - net/sched: cls_u32: fix netns refcount changes in u32_change()

  * CVE-2022-1116
    - io_uring: fix fs->users overflow

  * ext4: limit length to bitmap_maxbytes (LP: #1972281)
    - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole

  * Unprivileged users may use PTRACE_SEIZE to set PTRACE_O_SUSPEND_SECCOMP
    option (LP: #1972740)
    - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE

 -- Stefan Bader <stefan.bader@xxxxxxxxxxxxx>  Wed, 18 May 2022 16:07:54
+0200

** Changed in: linux (Ubuntu Impish)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1972281

Title:
  ext4: limit length to bitmap_maxbytes

Status in linux package in Ubuntu:
  Incomplete
Status in linux source package in Trusty:
  In Progress
Status in linux source package in Xenial:
  In Progress
Status in linux source package in Bionic:
  Fix Released
Status in linux source package in Focal:
  Fix Released
Status in linux source package in Impish:
  Fix Released
Status in linux source package in Jammy:
  Fix Released

Bug description:
  [Impact]
  Abusing ext4_fallocate() (as a normal user) triggers a BUG()/kernel panic.

  
  [Fix]
  Apply this upstream fix:

  commit 2da376228a2427501feb9d15815a45dbdbdd753e
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxxx>
  Date:   Thu Mar 31 13:05:15 2022 -0700

  ext4: limit length to bitmap_maxbytes - blocksize in punch_hole

  
  [Test]
  The reporter has provided a working reproducer.

  
  [Where problems could occur]
  Upstream fix already slated for @stable inclusion.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1972281/+subscriptions