Description
In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces is_bnode_offset_valid() method that checks the requested offset value. Also, it introduces check_and_correct_requested_length() method that checks and correct the requested length (if it is necessary). These methods are used in hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(), hfs_bnode_copy(), and hfs_bnode_move() with the goal to prevent the access out of allocated memory and triggering the crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e7d2dc2421e821e4045775e6dc226378328de6f6affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 67ecc81f6492275c9c54280532f558483c99c90eaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a1a60e79502279f996e55052f50cc14919020475affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < fe2891a9c43ab87d1a210d61e6438ca6936e2f62affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 384a66b89f9540a9a8cb0f48807697dfabaece4caffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < efc095b35b23297e419c2ab4fc1ed1a8f0781a29affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < fc7f732984ec91f30be3e574e0644066d07f2b78affected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < eec522fd0d28106b14a59ab2d658605febe4a3bbaffected1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a431930c9bac518bf99d6b1da526a7f37ddee8d8affected
Linux Linux
Default version status: affected
2.6.12affected0 to < 2.6.12unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.149 to ≤ 6.1.*unaffected6.6.103 to ≤ 6.6.*unaffected6.12.43 to ≤ 6.12.*unaffected6.15.11 to ≤ 6.15.*unaffected6.16.2 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e7d2dc2421e821e4045775e6dc226378328de6f6 ↗
- https://git.kernel.org/stable/c/67ecc81f6492275c9c54280532f558483c99c90e ↗
- https://git.kernel.org/stable/c/a1a60e79502279f996e55052f50cc14919020475 ↗
- https://git.kernel.org/stable/c/fe2891a9c43ab87d1a210d61e6438ca6936e2f62 ↗
- https://git.kernel.org/stable/c/384a66b89f9540a9a8cb0f48807697dfabaece4c ↗
- https://git.kernel.org/stable/c/efc095b35b23297e419c2ab4fc1ed1a8f0781a29 ↗
- https://git.kernel.org/stable/c/fc7f732984ec91f30be3e574e0644066d07f2b78 ↗
- https://git.kernel.org/stable/c/eec522fd0d28106b14a59ab2d658605febe4a3bb ↗
- https://git.kernel.org/stable/c/a431930c9bac518bf99d6b1da526a7f37ddee8d8 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗