Description
In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen in udf_current_aext to mitigate later uninit-value use in udf_get_fileshortad KMSAN bug[1]. After applying the patch reproducer did not trigger any issue[2]. [1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df [2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5eb76fb98b3335aa5cca6a7db2e659561c79c32baffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 417bd613bdbe791549f7687bb1b9b8012ff111c2affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0ce61b1f6b32df822b59c680cbe8e5ba5d335742affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4fc0d8660e391dcd8dde23c44d702be1f6846c61affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 72e445df65a0aa9066c6fe2b8736ba2fcca6dac7affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1ac49babc952f48d82676979b20885e480e69be8affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e52e0b92ed31dc62afbda15c243dcee0bb5bb58daffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 264db9d666ad9a35075cc9ed9ec09d021580fbb1affected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.246 to ≤ 5.10.*unaffected5.15.170 to ≤ 5.15.*unaffected6.1.115 to ≤ 6.1.*unaffected6.6.59 to ≤ 6.6.*unaffected6.11.6 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/5eb76fb98b3335aa5cca6a7db2e659561c79c32b ↗
- https://git.kernel.org/stable/c/417bd613bdbe791549f7687bb1b9b8012ff111c2 ↗
- https://git.kernel.org/stable/c/0ce61b1f6b32df822b59c680cbe8e5ba5d335742 ↗
- https://git.kernel.org/stable/c/4fc0d8660e391dcd8dde23c44d702be1f6846c61 ↗
- https://git.kernel.org/stable/c/72e445df65a0aa9066c6fe2b8736ba2fcca6dac7 ↗
- https://git.kernel.org/stable/c/1ac49babc952f48d82676979b20885e480e69be8 ↗
- https://git.kernel.org/stable/c/e52e0b92ed31dc62afbda15c243dcee0bb5bb58d ↗
- https://git.kernel.org/stable/c/264db9d666ad9a35075cc9ed9ec09d021580fbb1 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗