In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential out of bound read in ext4_fc_replay_scan() For scan loop must ensure that at least EXT4_FC_TAG_BASE_LEN space. If remain space less than EXT4_FC_TAG_BASE_LEN which will lead to out of bound read when mounting corrupt file system image. ADD_RANGE/HEAD/TAIL is needed to add extra check when do journal scan, as this three tags will read data during scan, tag length couldn't less than data length which will read.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | 11.3 |
| Linux | Linux | 11.5 |
| Linux | Linux | n/a |
| Linux | Linux | all under 2.0.20 |