6 min read
Linux kernel ext4 use-after-free
Mounting a crafted ext4 image, running a few operations, then unmounting triggers a use-after-free in ext4_put_super.
Read full articleTags
ext4
3 min read
Linux kernel ext4 slab out-of-bounds write
A setxattr operation after mounting a crafted ext4 image causes a slab-out-of-bounds write in ext4_xattr_set_entry because a large old_size value is used in a memset call.
Read full article3 min read
Linux kernel ext4 NULL pointer dereference
ext4_empty_dir in fs/ext4/namei.c allows a NULL pointer dereference because ext4_read_dirblock(inode,0,DIRENT_HTREE) can return zero after a crafted ext4 image is mounted.
Read full article