Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix uninitialized pointer free on read_alloc_one_name() error The function read_alloc_one_name() does not initialize the name field of the passed fscrypt_str struct if kmalloc fails to allocate the corresponding buffer. Thus, it is not guaranteed that fscrypt_str.name is initialized when freeing it. This is a follow-up to the linked patch that fixes the remaining instances of the bug introduced by commit e43eec81c516 ("btrfs: use struct qstr instead of name and namelen pairs").
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1cf474cd474bc5d3ef63086ffd009a87a5b7bb2e to < b37de9491f140a0ff125c27dd1050185c3accbc1affectede43eec81c5167b655b72c781b0e75e62a05e415e to < 7fc7c47b9ba0cf2d192f2117a64b24881b0b577faffectede43eec81c5167b655b72c781b0e75e62a05e415e to < 1ec28de5e476913ae51f909660b4447eddb28838affectede43eec81c5167b655b72c781b0e75e62a05e415e to < 2ab5e243c2266c841e0f6904fad1514b18eaf510affected6.1.57 to < 6.1.114affected
Linux Linux
Default version status: affected
6.2affected0 to < 6.2unaffected6.1.114 to ≤ 6.1.*unaffected6.6.58 to ≤ 6.6.*unaffected6.11.5 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b37de9491f140a0ff125c27dd1050185c3accbc1 ↗
- https://git.kernel.org/stable/c/7fc7c47b9ba0cf2d192f2117a64b24881b0b577f ↗
- https://git.kernel.org/stable/c/1ec28de5e476913ae51f909660b4447eddb28838 ↗
- https://git.kernel.org/stable/c/2ab5e243c2266c841e0f6904fad1514b18eaf510 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗