In the Linux kernel, the following vulnerability has been resolved:
afs: Increase buffer size in afsupdatevolume_status()
The max length of volume->vid value is 20 characters. So increase idbuf[] size up to 24 to avoid overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[DH: Actually, it's 20 + NUL, so increase it to 24 and use snprintf()]
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d",
"id": "CVE-2024-26736-0cf26d79",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56662160fc24d28cb75ac095cc6415ae1bda43e",
"id": "CVE-2024-26736-289e3b67",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "135226561524878446856028310825692518897",
"length": 1272.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8530b170e464017203e3b8c6c49af6e916aece1",
"id": "CVE-2024-26736-3861d9d5",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5",
"id": "CVE-2024-26736-6acaf90e",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "321580897303742626242895140325332634706",
"length": 1255.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d34a5e57632bb5ff825196ddd9a48ca403626dfa",
"id": "CVE-2024-26736-6f8515e5",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8530b170e464017203e3b8c6c49af6e916aece1",
"id": "CVE-2024-26736-7e5abf01",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "135226561524878446856028310825692518897",
"length": 1272.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9b5e2b7a8196850383c70d099bfd39e81ab6637",
"id": "CVE-2024-26736-7f7131c0",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56662160fc24d28cb75ac095cc6415ae1bda43e",
"id": "CVE-2024-26736-9702e53b",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e6065dd25b661420fac19c34282b6c626fcd35e",
"id": "CVE-2024-26736-b05033e4",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5",
"id": "CVE-2024-26736-b38004ad",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/afs/volume.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"290084194102609035667618306273397354753",
"43129207170468536399165212331823558094",
"28200063681743904689677849933520444916",
"320685510365770885683156952718088550234",
"39070675539648112393668597292740071646",
"214517853262731489524784133989530246741",
"3445835095278896274214709975370361309"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e6065dd25b661420fac19c34282b6c626fcd35e",
"id": "CVE-2024-26736-d3221417",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "135226561524878446856028310825692518897",
"length": 1272.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d34a5e57632bb5ff825196ddd9a48ca403626dfa",
"id": "CVE-2024-26736-e57d1cb2",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "135226561524878446856028310825692518897",
"length": 1272.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d",
"id": "CVE-2024-26736-e86ec38b",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "88812352693489615444974216348614657518",
"length": 1396.0
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d9b5e2b7a8196850383c70d099bfd39e81ab6637",
"id": "CVE-2024-26736-fa0246c8",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "afs_update_volume_status",
"file": "fs/afs/volume.c"
},
"digest": {
"function_hash": "135226561524878446856028310825692518897",
"length": 1272.0
}
}
]