Description
In the Linux kernel, the following vulnerability has been resolved: erofs: fix inconsistent per-file compression format EROFS can select compression algorithms on a per-file basis, and each per-file compression algorithm needs to be marked in the on-disk superblock for initialization. However, syzkaller can generate inconsistent crafted images that use an unsupported algorithmtype for specific inodes, e.g. use MicroLZMA algorithmtype even it's not set in `sbi->available_compr_algs`. This can lead to an unexpected "BUG: kernel NULL pointer dereference" if the corresponding decompressor isn't built-in. Fix this by checking against `sbi->available_compr_algs` for each m_algorithmformat request. Incorrect !erofs_sb_has_compr_cfgs preset bitmap is now fixed together since it was harmless previously.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8f89926290c4b3d31748d5089b27952243be0693 to < 47467e04816cb297905c0f09bc2d11ef865942d9affected8f89926290c4b3d31748d5089b27952243be0693 to < 823ba1d2106019ddf195287ba53057aee33cf724affected8f89926290c4b3d31748d5089b27952243be0693 to < eed24b816e50c6cd18cbee0ff0d7218c8fced199affected8f89926290c4b3d31748d5089b27952243be0693 to < 118a8cf504d7dfa519562d000f423ee3ca75d2c4affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.1.80 to ≤ 6.1.*unaffected6.6.14 to ≤ 6.6.*unaffected6.7.2 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected