A vulnerability was found in ext4_protect_reserved_inode in fs/ext4/block_validity.c. When a local attacker mounts a crafted image with a large size inode journal can cause a denial of service in form of a soft lockup problem. Reference: https://patchwork.ozlabs.org/patch/1236118/
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1805888]
This was fixed for Fedora with the 5.5.5 kernel rebase for F31 and the 5.4.21 stable kernel update for F30.
Statement: The affected code was not introduced into any kernel versions shipped with Red Hat Enterprise Linux making this vulnerable not applicable to these platforms.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-8992