Description
In the Linux kernel, the following vulnerability has been resolved: [ceph] parse_longname(): strrchr() expects NUL-terminated string ... and parse_longname() is not guaranteed that. That's the reason why it uses kmemdup_nul() to build the argument for kstrtou64(); the problem is, kstrtou64() is not the only thing that need it. Just get a NUL-terminated copy of the entire thing and be done with that...
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
dd66df0053ef84add5e684df517aa9b498342381 to < 4b9aee707c4580511983a0998547f3b28514e6a6affecteddd66df0053ef84add5e684df517aa9b498342381 to < bb80f7618832d26f7e395f52f82b1dac76223e5faffecteddd66df0053ef84add5e684df517aa9b498342381 to < 3145b2b11492d61c512bbc59660bb823bc757f48affecteddd66df0053ef84add5e684df517aa9b498342381 to < 493479af8af3ab907f49e99323777d498a4fbd2baffecteddd66df0053ef84add5e684df517aa9b498342381 to < 101841c38346f4ca41dc1802c867da990ffb32ebaffected
Linux Linux
Default version status: affected
6.6affected0 to < 6.6unaffected6.6.157 to ≤ 6.6.*unaffected6.12.42 to ≤ 6.12.*unaffected6.15.10 to ≤ 6.15.*unaffected6.16.1 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4b9aee707c4580511983a0998547f3b28514e6a6 ↗
- https://git.kernel.org/stable/c/bb80f7618832d26f7e395f52f82b1dac76223e5f ↗
- https://git.kernel.org/stable/c/3145b2b11492d61c512bbc59660bb823bc757f48 ↗
- https://git.kernel.org/stable/c/493479af8af3ab907f49e99323777d498a4fbd2b ↗
- https://git.kernel.org/stable/c/101841c38346f4ca41dc1802c867da990ffb32eb ↗