CVE-2023-53683: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()

Description

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

f62f5ee63052324ad94dd05091743d9e09f72070 to < 61af77acd039ffd221bf7adf0dc95d0a4d377505affected
ab778439c6fa0071698b62a351f79d319fd72c53 to < c074913b12db3632b11588b31bbfb0fa80a0a1c9affected
781fa141414ef18b52f15037497155f80bf0ecab to < a75d9211a07fed513c08c5d4861c4a36ac6a74feaffected
1f881d9201f6e0a917004a14329f9ff3d0bfa1e5 to < c8daee66585897a4c90d937c91e762100237bff9affected
48d9e2e6de01ed35e965eb549758a837c07b601d to < 37cab61a52d6f42b2d961c51bcf369f09e235fb5affected
55d1cbbbb29e6656c662ee8f73ba1fc4777532eb to < 48960a503fcec76d3f72347b7e679dda08ca43beaffected
55d1cbbbb29e6656c662ee8f73ba1fc4777532eb to < 3a9d68d84b2e41ba3f2a727b36f035fad6800492affected
55d1cbbbb29e6656c662ee8f73ba1fc4777532eb to < 81b21c0f0138ff5a499eafc3eb0578ad2a99622caffected
4.14.303 to < 4.14.316affected
4.19.270 to < 4.19.284affected
5.4.229 to < 5.4.244affected
5.10.163 to < 5.10.181affected
5.15.87 to < 5.15.113affected

Linux Linux

Default version status: affected

5.16affected
0 to < 5.16unaffected
4.14.316 to ≤ 4.14.*unaffected
4.19.284 to ≤ 4.19.*unaffected
5.4.244 to ≤ 5.4.*unaffected
5.10.181 to ≤ 5.10.*unaffected
5.15.113 to ≤ 5.15.*unaffected
6.1.30 to ≤ 6.1.*unaffected
6.3.4 to ≤ 6.3.*unaffected
6.4 to ≤ *unaffected

CVE-2023-53683

fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()

Description

Affected products

Linux Linux

Linux Linux

References