What happened
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case, truncate on fsverity file will succeed, what this check is trying to prevent.
Affected versions
Linux: 2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec through before b4c0c41b952c21baed3f822eab508ebbd1d355d9 (git); e9734653c523c744f03333ece6ae7a315187f05c through before 2d2b2ed7bdcc6df4942292318c5455b5e94ba525 (git); e9734653c523c744f03333ece6ae7a315187f05c through before d2f96bcb89d36d488a10e3bcf819b98536968286 (git); 7.0 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.