In the Linux kernel, the following vulnerability has been resolved:
affs: handle set_blocksize failures
affs uses buffer_heads, which don't handle block size > PAGE_SIZE well.
Without this, mounting we will hit the
BUG_ON(offset >= folio_size(folio));
in folio_set_bh on the first __bread_gfp call.
References 3
https://git.kernel.org/stable/c/0861182af5983a39bd2a891966436c5679b74a45
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/bb45146a661934ef801f8fc62f88cdbcf6584ed1
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e01af5aa641039e000af855f448475316f0550fc
416baaa9-dc9f-4396-8d5f-8c081fb06d67