Linux 6.18 Hardened Against Specially-Crafted EROFS Images Leading To System Crashes
The EROFS read-only file-system continues enjoying nice uptick in use from embedded devices to containers. Merged today for Linux 6.18 is some new hardening to the EROFS driver where specially-crafted file-system images could lead to system crashes or infinite loops.
Robert Morris of MIT, who is well known for creating the first computer worm on the Internet, happened to be the one that came up with specially-crafted EROFS images that could put the driver into an infinite loop or a separate issue leading to system crashes.
RTM had reported two corrupted EROFS images that could lead to system crashes. These fuzed read-only file-system images cause issue with the recently introduced encoded extents functionality on Linux 6.15+. This patch fixes the two cases that could lead to system crashes.
RTM also reported infinite loops that could happen within the EROFS code from specially crafted images. This patch fixes those infinite loops.
The code was merged today for hardening against these fuzzed file-system images. For now they are on Linux 6.18 Git but will presumably be back-ported to Linux 6.17 too in the days to come.
Robert Morris of MIT, who is well known for creating the first computer worm on the Internet, happened to be the one that came up with specially-crafted EROFS images that could put the driver into an infinite loop or a separate issue leading to system crashes.
RTM had reported two corrupted EROFS images that could lead to system crashes. These fuzed read-only file-system images cause issue with the recently introduced encoded extents functionality on Linux 6.15+. This patch fixes the two cases that could lead to system crashes.
RTM also reported infinite loops that could happen within the EROFS code from specially crafted images. This patch fixes those infinite loops.
The code was merged today for hardening against these fuzzed file-system images. For now they are on Linux 6.18 Git but will presumably be back-ported to Linux 6.17 too in the days to come.