CVE-2019-15538
- State
- Published
- Severity
- Not scored
- Published
- Aug 25, 2019
- Updated
- Aug 5, 2024
- Reserved
- Aug 25, 2019
Description
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a local DoS attack vector, but it might result as well in remote DoS if the XFS filesystem is exported for instance via NFS.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://lore.kernel.org/linux-xfs/20190823035528.GH1037422%40magnolia/
- https://lore.kernel.org/linux-xfs/20190823192433.GA8736%40eldamar.local
- https://github.com/torvalds/linux/commit/1fb254aa983bf190cfd685d40c64a480a9bafaee
- https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1fb254aa983bf190cfd685d40c64a480a9bafaee
- FEDORA-2019-4c91a2f76evendor-advisory
- FEDORA-2019-97380355aevendor-advisory
- [debian-lts-announce] 20190914 [SECURITY] [DLA 1919-1] linux-4.9 security updatemailing-list
- [debian-lts-announce] 20190915 [SECURITY] [DLA 1919-2] linux-4.9 security updatemailing-list
- openSUSE-SU-2019:2173vendor-advisory
- openSUSE-SU-2019:2181vendor-advisory
- USN-4144-1vendor-advisory
- https://security.netapp.com/advisory/ntap-20191004-0001/
- USN-4147-1vendor-advisory
- https://support.f5.com/csp/article/K32592426?utm_source=f5support&%3Butm_medium=RSS
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.