Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-53234

erofs: handle NONHEAD !delta[1] lclusters gracefully

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: handle NONHEAD !delta[1] lclusters gracefully syzbot reported a WARNING in iomap_iter_done: iomap_fiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80 ioctl_fiemap fs/ioctl.c:220 [inline] Generally, NONHEAD lclusters won't have delta[1]==0, except for crafted images and filesystems created by pre-1.0 mkfs versions. Previously, it would immediately bail out if delta[1]==0, which led to inadequate decompressed lengths (thus FIEMAP is impacted). Treat it as delta[1]=1 to work around these legacy mkfs versions. `lclusterbits > 14` is illegal for compact indexes, error out too.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d95ae5e25326092d61613acf98280270dde22778 to < 75a0a6dde803e7a3af700da8da9a361b49f69ebaaffected
  • d95ae5e25326092d61613acf98280270dde22778 to < f466641debcbea8bdf78d1b63a6270aadf9301bfaffected
  • d95ae5e25326092d61613acf98280270dde22778 to < 480c6c7b55aeacac800bc2a0d321ff53273045e5affected
  • d95ae5e25326092d61613acf98280270dde22778 to < daaf68fef4b2ff97928227630021d37b27a96655affected
  • d95ae5e25326092d61613acf98280270dde22778 to < 0bc8061ffc733a0a246b8689b2d32a3e9204f43caffected
  • 96a85becb811ca2ce21a21721f1544d342ae431eaffected
  • 8c723eef989bc419585237daa467b787ddca5415affected
  • 5.4.251 to < 5.5affected
  • 5.10.188 to < 5.11affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.127 to ≤ 6.1.*unaffected
  • 6.6.64 to ≤ 6.6.*unaffected
  • 6.11.11 to ≤ 6.11.*unaffected
  • 6.12.2 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References