xfs: validate attr entry pointer before field access
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.2%
probabilidade de exploração
0.2%top 92% das CVEs
exploração observada
nãonenhuma fonte reporta
In the Linux kernel, the following vulnerability has been resolved:
xfs: validate attr entry pointer before field access
xfs_attr3_leaf_verify_entry() accesses lentry/rentry fields (namelen,
valuelen) before checking if the entry pointer itself is within bounds.
If nameidx is crafted to point near the end of the buffer, these field
accesses can read out-of-bounds before the bounds check at
name_end > buf_end is performed.
Add explicit bounds checks for entry pointers before accessing their
fields. Use offsetof() to check that the start of the flexible array
member (nameval/name) is within bounds, which ensures all preceding
fields are safe to access.
Produtos afetados
Linux · LinuxReferências
https://git.kernel.org/stable/c/03a12253dd2a036545bdb0110a4e0b8dc70f8e7chttps://git.kernel.org/stable/c/0f82586741e39926542f621bafa424e237a04fa4https://git.kernel.org/stable/c/134d82a2b5e3eba3ebf58753a1387b22f26ca1dehttps://git.kernel.org/stable/c/184c1a80421a5b5ddcd262e47980ce2e67fee211https://git.kernel.org/stable/c/98a42bb9d60d42898c3494de351a1bf508348cdehttps://git.kernel.org/stable/c/9f92e749fc08b7ff3d9da190c4d1b2273745b282https://git.kernel.org/stable/c/b7eea80be25f3334f131d52982b3131aba77b97dhttps://git.kernel.org/stable/c/c35da2bac6f7cb9a9be73f188b4fcc324615c327https://git.kernel.org/stable/c/e99120b5944a16d0bc27e52b33de78bcdaaabf5c