
Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
A vulnerability was discovered in the Linux kernel's ext4 filesystem implementation, specifically in the 'ext4darelease_space' function. The vulnerability was identified and tracked as CVE-2022-49880. The issue involves a warning condition that occurs when attempting to release space in the filesystem, where the number of blocks to be freed exceeds the number of reserved data blocks (NVD).
The vulnerability manifests when the filesystem attempts to release space through the ext4dareleasespace function. The specific issue occurs when tofree is greater than ei->ireserveddatablocks, triggering a warning. The technical flow involves ext4dawritebegin, ext4createinlinedata, and subsequent operations that lead to eh->ehentries not being zero and setting the extent flag. This can result in a scenario where tofree equals 1 but ei->ireserveddatablocks equals 0, causing the warning condition (NVD).
The vulnerability results in a warning condition in the Linux kernel's ext4 filesystem implementation. While this primarily affects system logging and debugging, it could potentially impact filesystem operations and system stability when handling certain file operations (NVD).
The vulnerability has been resolved by implementing a fix that forbids inode migration when it has inline data. This prevents the condition that leads to the warning by ensuring proper handling of reserved block counts (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
A comprehensive threat intelligence database of cloud security incidents, actors, tools and techniques
A step-by-step framework for modeling and improving SaaS and PaaS tenant isolation
Get a personalized demo
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
“We know that if Wiz identifies something as critical, it actually is.”