Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-41059

hfsplus: fix uninit-value in copy_name

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in sized_strscpy+0xc4/0x160 sized_strscpy+0xc4/0x160 copy_name+0x2af/0x320 fs/hfsplus/xattr.c:411 hfsplus_listxattr+0x11e9/0x1a50 fs/hfsplus/xattr.c:750 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3877 [inline] slab_alloc_node mm/slub.c:3918 [inline] kmalloc_trace+0x57b/0xbe0 mm/slub.c:4065 kmalloc include/linux/slab.h:628 [inline] hfsplus_listxattr+0x4cc/0x1a50 fs/hfsplus/xattr.c:699 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f [Fix] When allocating memory to strbuf, initialize memory to 0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 017f8da43e92ddd9989884720b694a512e09ccce to < 72805debec8f7aa342da194fe0ed7bc8febea335affected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < c733e24a61cbcff10f660041d6d84d32bb7e4cb4affected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < 34f8efd2743f2d961e92e8e994de4c7a2f9e74a0affected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < d02d8c1dacafb28930c39e16d48e40bb6e4cbc70affected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < 22999936b91ba545ce1fbbecae6895127945e91caffected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < f08956d8e0f80fd0d4ad84ec917302bb2f3a9c6aaffected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < ad57dc2caf1e0a3c0a9904400fae7afbc9f74bb2affected
  • 017f8da43e92ddd9989884720b694a512e09ccce to < 0570730c16307a72f8241df12363f76600baf57daffected

Linux Linux

Default version status: affected

  • 3.16affected
  • 0 to < 3.16unaffected
  • 4.19.319 to ≤ 4.19.*unaffected
  • 5.4.281 to ≤ 5.4.*unaffected
  • 5.10.223 to ≤ 5.10.*unaffected
  • 5.15.164 to ≤ 5.15.*unaffected
  • 6.1.101 to ≤ 6.1.*unaffected
  • 6.6.42 to ≤ 6.6.*unaffected
  • 6.9.11 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References