In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4mbnormalize_request
We need to set acgex to notify the goal start used in ext4mbfindbygoal. Set acgex instead of acfex in ext4mbnormalizerequest. Besides we should assure goal start is in range [firstdatablock, blockscount) as ext4mbinitialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise we could end up passing an underflowed value of ar->pright - size to ext4getgroupnoandoffset(), which will trigger a BUGON later on. - TYT ]
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54021.json"
}