In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg The Linux kernel CVE team has assigned CVE-2023-52622 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/20240326171931.1354035-5-lee@kernel.org/T
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 2271689]
This was fixed for Fedora with the 6.7.4 stable kernel updates.
This appears to be a warning about a too-large allocation failing, an error which is handled properly. What is the security issue here? I don't see one.
In reply to comment #6: > This appears to be a warning about a too-large allocation failing, an error > which is handled properly. > > What is the security issue here? I don't see one. Hi Sandeen, this CVE was assigned by the kernel CNA. We are currently checking how to handle this situation. @Rohit for awareness