Source: zfs-linux
Version: 2.0.1-1
Severity: grave
Tags: upstream
Justification: causes data loss
X-Debbugs-Cc: aeru...@aerusso.net

See Brian Behlendof's comment at [1], in the merge request for commit
3f81aba76, referencing the analysis of the bug report [2].

In summary: a kernel buffer iterator can be advanced beyond its end.
On kernels 5.12 and later, a safety mechanism has been created that
detects this error, but as of 5.10, this mechanism is not present
(AFAICT).

The aforementioned commit addresses the issue, and has also been
applied to 2.0.5-staging (as 3e0bc63e1).  As of now, no released
version of ZFS addresses this issue.

There is a suggestion that this could lead to memory corruption,
which seems plausible.  The lack of widespread data loss under ZFS
2.0 to date suggests that any corruption is relatively minor.

[1] https://github.com/openzfs/zfs/pull/12155#issuecomment-850935748
[2] https://github.com/openzfs/zfs/issues/12041

Attachment: OpenPGP_0xB01C53D5DED4A4EE.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

  • Bug#989373: zfs-linux: Extra iov_iter_advance m... Antonio Russo

Reply via email to