ISOMAN

CVE

CVE-2019-15538

An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.

Severity
HIGH
CVSS
7.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
  2. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
  3. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fb254aa983bf190cfd685d40c64a480a9bafaee
  4. https://github.com/torvalds/linux/commit/1fb254aa983bf190cfd685d40c64a480a9bafaee
  5. https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
  6. https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html
  7. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O3RUDQJXRJQVGHCGR4YZWTQ3ECBI7TXH/
  8. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4JZ6AEUKFWBHQAROGMQARJ274PQP2QP/
  9. https://lore.kernel.org/linux-xfs/20190823035528.GH1037422%40magnolia/
  10. https://lore.kernel.org/linux-xfs/20190823192433.GA8736%40eldamar.local
  11. https://security.netapp.com/advisory/ntap-20191004-0001/
  12. https://support.f5.com/csp/article/K32592426?utm_source=f5support&amp%3Butm_medium=RSS
  13. https://usn.ubuntu.com/4144-1/
  14. https://usn.ubuntu.com/4147-1/
  15. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
  16. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
  17. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fb254aa983bf190cfd685d40c64a480a9bafaee
  18. https://github.com/torvalds/linux/commit/1fb254aa983bf190cfd685d40c64a480a9bafaee
  19. https://lists.debian.org/debian-lts-announce/2019/09/msg00014.html
  20. https://lists.debian.org/debian-lts-announce/2019/09/msg00015.html