High · published October 9, 2024
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: add bounds checking to ocfs2_xattr_find_entry()
Add a paranoia check to make sure it doesn't stray beyond valid memory
region containing ocfs2 xattr entries when scanning for a match. It will
prevent out-of-bound access in case of crafted images.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 6.1.112 | 6.1.112 |
| linux/linux_kernel | ≥ 6.2, < 6.6.53 | 6.6.53 |
| linux/linux_kernel | ≥ 6.7, < 6.10.12 | 6.10.12 |