CVE-2023-53081

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/05/2025
Last modified:
05/05/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ocfs2: fix data corruption after failed write<br /> <br /> When buffered write fails to copy data into underlying page cache page,<br /> ocfs2_write_end_nolock() just zeroes out and dirties the page. This can<br /> leave dirty page beyond EOF and if page writeback tries to write this page<br /> before write succeeds and expands i_size, page gets into inconsistent<br /> state where page dirty bit is clear but buffer dirty bits stay set<br /> resulting in page data never getting written and so data copied to the<br /> page is lost. Fix the problem by invalidating page beyond EOF after<br /> failed write.

Impact