Description
In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
cf1d6c763fbcb115263114302485ad17e7933d87 to < b49a786beb11ff740cb9e0c20b999c2a0e1729c2affectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 60c0d36189bad58b1a8e69af8781d90009559ea1affectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 34759b7e4493d7337cbc414c132cef378c492a2caffectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6ddaffectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 9b32539590a8e6400ac2f6e7cf9cbb8e08711a2faffectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 1f6e167d6753fe3ea493cdc7f7de8d03147a4d39affectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 8e7bef408261746c160853fc27df3139659f5f77affectedcf1d6c763fbcb115263114302485ad17e7933d87 to < 9e3041fecdc8f78a5900c3aa51d3d756e73264d6affected
Linux Linux
Default version status: affected
2.6.28affected0 to < 2.6.28unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.227 to ≤ 5.10.*unaffected5.15.168 to ≤ 5.15.*unaffected6.1.112 to ≤ 6.1.*unaffected6.6.53 to ≤ 6.6.*unaffected6.10.12 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b49a786beb11ff740cb9e0c20b999c2a0e1729c2 ↗
- https://git.kernel.org/stable/c/60c0d36189bad58b1a8e69af8781d90009559ea1 ↗
- https://git.kernel.org/stable/c/34759b7e4493d7337cbc414c132cef378c492a2c ↗
- https://git.kernel.org/stable/c/5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd ↗
- https://git.kernel.org/stable/c/9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f ↗
- https://git.kernel.org/stable/c/1f6e167d6753fe3ea493cdc7f7de8d03147a4d39 ↗
- https://git.kernel.org/stable/c/8e7bef408261746c160853fc27df3139659f5f77 ↗
- https://git.kernel.org/stable/c/9e3041fecdc8f78a5900c3aa51d3d756e73264d6 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗