Vulnerability in XFS allowing raw data to be read from a block device
A vulnerability has been found in the XFS filesystem code (CVE-2021-4155) that allows a local unprivileged user to read data from unused blocks directly from the block device. All significant Linux kernel versions above 5.16 that contain the XFS driver are affected by this issue. The fix was included in version 5.16, as well as in updates for kernels 5.15.14, 5.10.91, 5.4.171, 4.19.225, and so on. The state of the updates addressing the issue […]
