Description
In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head zisofs_fill_pages() reads the compressed block pointer table. The error paths release the current buffer_head, the loop also releases the old buffer_head when it advances. However, the success path leaves the last buffer_head referenced. Release it before returning success.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
59bc055211b8d266ab6089158058bf8268e02006 to < dbcc7d1b818162aeab2e97fd217d86546d9fde15affected59bc055211b8d266ab6089158058bf8268e02006 to < ec33e6b7a1de20d7e623b12633191a855445657daffected59bc055211b8d266ab6089158058bf8268e02006 to < 0c2c54a7d174edc845f7bae24179fe72a926d10faffected59bc055211b8d266ab6089158058bf8268e02006 to < 5677737c2cedf417c0fcf61540b9cef0e62273d4affected59bc055211b8d266ab6089158058bf8268e02006 to < f2a1611065c700a374b31c5cc8a7587f5e3bfe73affected59bc055211b8d266ab6089158058bf8268e02006 to < 106e1a3b2b3454fbda63a59e9290cb9a253f81aaaffected59bc055211b8d266ab6089158058bf8268e02006 to < 3371d30a97a257b7b5f2c8009612e9d452180f0aaffected59bc055211b8d266ab6089158058bf8268e02006 to < 2f7dd9b86fe4076059e6a4a2a2c5d565afd76b9eaffected
Linux Linux
Default version status: affected
2.6.33affected0 to < 2.6.33unaffected5.10.270 to ≤ 5.10.*unaffected5.15.221 to ≤ 5.15.*unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/dbcc7d1b818162aeab2e97fd217d86546d9fde15 ↗
- https://git.kernel.org/stable/c/ec33e6b7a1de20d7e623b12633191a855445657d ↗
- https://git.kernel.org/stable/c/0c2c54a7d174edc845f7bae24179fe72a926d10f ↗
- https://git.kernel.org/stable/c/5677737c2cedf417c0fcf61540b9cef0e62273d4 ↗
- https://git.kernel.org/stable/c/f2a1611065c700a374b31c5cc8a7587f5e3bfe73 ↗
- https://git.kernel.org/stable/c/106e1a3b2b3454fbda63a59e9290cb9a253f81aa ↗
- https://git.kernel.org/stable/c/3371d30a97a257b7b5f2c8009612e9d452180f0a ↗
- https://git.kernel.org/stable/c/2f7dd9b86fe4076059e6a4a2a2c5d565afd76b9e ↗