High · published October 29, 2024
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix uninitialized pointer free on read_alloc_one_name() error
The function read_alloc_one_name() does not initialize the name field of
the passed fscrypt_str struct if kmalloc fails to allocate the
corresponding buffer. Thus, it is not guaranteed that
fscrypt_str.name is initialized when freeing it.
This is a follow-up to the linked patch that fixes the remaining
instances of the bug introduced by commit e43eec81c516 ("btrfs: use
struct qstr instead of name and namelen pairs").
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 6.1.57, < 6.1.114 | 6.1.114 |
| linux/linux_kernel | ≥ 6.2, < 6.6.58 | 6.6.58 |
| linux/linux_kernel | ≥ 6.7, < 6.11.5 | 6.11.5 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |