High · published July 29, 2024
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
xattr in ocfs2 maybe 'non-indexed', which saved with additional space
requested. It's better to check if the memory is out of bound before
memcmp, although this possibility mainly comes from crafted poisonous
images.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.19.323 | 4.19.323 |
| linux/linux_kernel | ≥ 4.20, < 5.4.285 | 5.4.285 |
| linux/linux_kernel | ≥ 5.5, < 5.10.227 | 5.10.227 |
| linux/linux_kernel | ≥ 5.11, < 5.15.168 | 5.15.168 |
| linux/linux_kernel | ≥ 5.16, < 6.1.112 | 6.1.112 |
| linux/linux_kernel | ≥ 6.2, < 6.6.53 | 6.6.53 |
| linux/linux_kernel | ≥ 6.7, < 6.10.12 | 6.10.12 |