High · published November 7, 2024
In the Linux kernel, the following vulnerability has been resolved:
udf: fix uninit-value use in udf_get_fileshortad
Check for overflow when computing alen in udf_current_aext to mitigate
later uninit-value use in udf_get_fileshortad KMSAN bug[1].
After applying the patch reproducer did not trigger any issue[2].
[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df
[2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 4.19.323 | 4.19.323 |
| linux/linux_kernel | ≥ 4.20, < 5.4.285 | 5.4.285 |
| linux/linux_kernel | ≥ 5.5, < 5.15.170 | 5.15.170 |
| linux/linux_kernel | ≥ 5.16, < 6.1.115 | 6.1.115 |
| linux/linux_kernel | ≥ 6.2, < 6.6.59 | 6.6.59 |
| linux/linux_kernel | ≥ 6.7, < 6.11.6 | 6.11.6 |
| linux/linux_kernel | all versions | — |