On Sun, Sep 30, 2018 at 10:17:48AM -0700, Guenter Roeck wrote: > From: Theodore Ts'o <tytso@xxxxxxx> > > commit 8cdb5240ec5928b20490a2bb34cb87e9a5f40226 upstream. > > When expanding the extra isize space, we must never move the > system.data xattr out of the inode body. For performance reasons, it > doesn't make any sense, and the inline data implementation assumes > that system.data xattr is never in the external xattr block. > > This addresses CVE-2018-10880 > > https://bugzilla.kernel.org/show_bug.cgi?id=200005 > > Signed-off-by: Theodore Ts'o <tytso@xxxxxxx> > Cc: stable@xxxxxxxxxx > [groeck: Context changes] > Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx> > --- > I thought the 4.4.y backport should apply, but I think it doesn't after > all. This backport applies to v4.9.y. Thanks, that worked. greg k-h
