In the Linux kernel, the following vulnerability has been resolved:
fuse: Initialize beyond-EOF page contents before setting uptodate
fusenotifystore(), unlike fusedoreadpage(), does not enable page zeroing (because it can be used to change partial page contents).
So fusenotifystore() must be more careful to fully initialize page contents (including parts of the page that are beyond end-of-file) before marking the page uptodate.
The current code can leave beyond-EOF page contents uninitialized, which makes these uninitialized page contents visible to userspace via mmap().
This is an information leak, but only affects systems which do not enable init-on-alloc (via CONFIGINITONALLOCDEFAULT_ON=y or the corresponding kernel command line parameter).
{ "vanir_signatures": [ { "id": "CVE-2024-44947-0d7bcfcb", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33168db352c7b56ae18aa55c2cae1a1c5905d30e", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-1e7c22c5", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac42e0f0eb66af966015ee33fd355bc6f5d80cd6", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-2608ba15", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49934861514d36d0995be8e81bb3312a499d8d9a", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-2e52c0b8", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac42e0f0eb66af966015ee33fd355bc6f5d80cd6", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1395.0, "function_hash": "214014411153623287677318987737812210499" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } }, { "id": "CVE-2024-44947-68f9f815", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49934861514d36d0995be8e81bb3312a499d8d9a", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1446.0, "function_hash": "50548814232188436473318814500592645325" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } }, { "id": "CVE-2024-44947-72ed72a6", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@831433527773e665bdb635ab5783d0b95d1246f4", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1395.0, "function_hash": "214014411153623287677318987737812210499" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } }, { "id": "CVE-2024-44947-8a555872", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4690e2171f651e2b415e3941ce17f2f7b813aff6", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1381.0, "function_hash": "301198939050683037252702793337115444894" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } }, { "id": "CVE-2024-44947-8e68d757", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a067240817bee8a9360539af5d79a4bf5398a5", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1395.0, "function_hash": "214014411153623287677318987737812210499" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } }, { "id": "CVE-2024-44947-977bc483", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33168db352c7b56ae18aa55c2cae1a1c5905d30e", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1446.0, "function_hash": "50548814232188436473318814500592645325" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } }, { "id": "CVE-2024-44947-9df5d02c", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@831433527773e665bdb635ab5783d0b95d1246f4", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-a52f6af5", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c78303eafbf85a728dd84d1750e89240c677dd9", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-c9505620", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4690e2171f651e2b415e3941ce17f2f7b813aff6", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-de379100", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a067240817bee8a9360539af5d79a4bf5398a5", "deprecated": false, "signature_version": "v1", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "3770993347071456090033143925573709934", "255137218915781269878361046617800984762", "222183065521619448793368249009989854510", "327161608841961341536445806076167294708", "293656857874310416567400562954202053047", "299712584649434714795033154910895597951" ] }, "target": { "file": "fs/fuse/dev.c" } }, { "id": "CVE-2024-44947-dfe0fbaf", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c78303eafbf85a728dd84d1750e89240c677dd9", "deprecated": false, "signature_version": "v1", "signature_type": "Function", "digest": { "length": 1381.0, "function_hash": "301198939050683037252702793337115444894" }, "target": { "file": "fs/fuse/dev.c", "function": "fuse_notify_store" } } ] }