CVE-2024-43845CWE-908

CVE-2024-43845

High · published August 17, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

udf: Fix bogus checksum computation in udf_rename()

Syzbot reports uninitialized memory access in udf_rename() when updating

checksum of '..' directory entry of a moved directory. This is indeed

true as we pass on-stack diriter.fi to the udf_update_tag() and because

that has only struct fileIdentDesc included in it and not the impUse or

name fields, the checksumming function is going to checksum random stack

contents beyond the end of the structure. This is actually harmless

because the following udf_fiiter_write_fi() will recompute the checksum

from on-disk buffers where everything is properly included. So all that

is needed is just removing the bogus calculation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00221 · 12.0th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2024-08-17T14:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.6.446.6.44
linux/linux_kernel≥ 6.7, < 6.10.36.10.3
References (4)
EPSS history
Timeline
  • 17 AUG 09:21Z
    udf: Fix bogus checksum computation in udf_rename()
    cvelistv5