An issue was discovered in xfssetattrnonsize in fs/xfs/xfsiops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfssetattrnonsize is failing to unlock the ILOCK after the xfsqmvopchown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1fb254aa983bf190cfd685d40c64a480a9bafaee",
"id": "CVE-2019-15538-f18d5d0b",
"target": {
"file": "fs/xfs/xfs_iops.c"
},
"digest": {
"line_hashes": [
"163805202903517494337199227423532234460",
"249236961023831169311978709786744309857",
"72365962582453319553733438900396989556",
"256689085505241927866262782766397582647"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@1fb254aa983bf190cfd685d40c64a480a9bafaee",
"id": "CVE-2019-15538-fa949249",
"target": {
"file": "fs/xfs/xfs_iops.c",
"function": "xfs_setattr_nonsize"
},
"digest": {
"function_hash": "24675462567676723939904863565868615929",
"length": 3009.0
},
"signature_type": "Function",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15538.json"
[
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/1fb254aa983bf190cfd685d40c64a480a9bafaee",
"id": "CVE-2019-15538-1203ac59",
"target": {
"file": "fs/xfs/xfs_iops.c",
"function": "xfs_setattr_nonsize"
},
"digest": {
"function_hash": "24675462567676723939904863565868615929",
"length": 3009.0
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/torvalds/linux/commit/1fb254aa983bf190cfd685d40c64a480a9bafaee",
"id": "CVE-2019-15538-1c049b36",
"target": {
"file": "fs/xfs/xfs_iops.c"
},
"digest": {
"line_hashes": [
"163805202903517494337199227423532234460",
"249236961023831169311978709786744309857",
"72365962582453319553733438900396989556",
"256689085505241927866262782766397582647"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-15538.json"