High · published February 21, 2024
In the Linux kernel, the following vulnerability has been resolved:
f2fs: explicitly null-terminate the xattr list
When setting an xattr, explicitly null-terminate the xattr list. This
eliminates the fragile assumption that the unused xattr space is always
zeroed.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.19.306 | 4.19.306 |
| linux/linux_kernel | ≥ 4.20.0, < 5.4.268 | 5.4.268 |
| linux/linux_kernel | ≥ 5.5.0, < 5.10.209 | 5.10.209 |
| linux/linux_kernel | ≥ 5.11.0, < 5.15.148 | 5.15.148 |
| linux/linux_kernel | ≥ 5.16.0, < 6.1.74 | 6.1.74 |
| linux/linux_kernel | ≥ 6.2.0, < 6.6.13 | 6.6.13 |
| linux/linux_kernel | ≥ 6.7.0, < 6.7.1 | 6.7.1 |