In the Linux kernel, the following vulnerability has been resolved:
ocfs2: add bounds checking to ocfs2xattrfind_entry()
Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.
[ { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-01664fd8" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-03588a76" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34759b7e4493d7337cbc414c132cef378c492a2c", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-0e3a9a4b" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-0e3c84cb" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-10a0c218" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-138378b1" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-196e1c57" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-296545d3" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-2cdcdda3" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-370da479" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-37f1ace5" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-3c3f852f" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-48b31bd1" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-4aed63a0" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-4c8f3771" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-4de4ff7a" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-512eb85b" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-6d4e5d8d" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-6fc7b54d" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-76fe0b92" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-79812281" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-7e241076" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-87cb5147" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-8b82793c" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f6e167d6753fe3ea493cdc7f7de8d03147a4d39", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-96b87b62" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-a245ae34" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-abddb452" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e3041fecdc8f78a5900c3aa51d3d756e73264d6", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-ae716b70" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34759b7e4493d7337cbc414c132cef378c492a2c", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-aed3dba6" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34759b7e4493d7337cbc414c132cef378c492a2c", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-b6185ffb" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-be52dc22" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e7bef408261746c160853fc27df3139659f5f77", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-bfa34174" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34759b7e4493d7337cbc414c132cef378c492a2c", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-c334645b" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd", "signature_version": "v1", "target": { "function": "ocfs2_xattr_block_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "54152096713972672159806144057578397793", "length": 960.0 }, "id": "CVE-2024-47670-cc6a5e1f" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34759b7e4493d7337cbc414c132cef378c492a2c", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-d2cc2b27" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b49a786beb11ff740cb9e0c20b999c2a0e1729c2", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_find", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "300990846891013663309120302084920019915", "length": 1111.0 }, "id": "CVE-2024-47670-df486d31" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60c0d36189bad58b1a8e69af8781d90009559ea1", "signature_version": "v1", "target": { "function": "ocfs2_xattr_find_entry", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "311108337583931033902505875808289407539", "length": 561.0 }, "id": "CVE-2024-47670-e243f716" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5bbe51eaf01a5dd6fb3f0dea81791e5dbc6dc6dd", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-e321430f" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f", "signature_version": "v1", "target": { "file": "fs/ocfs2/xattr.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "60799215768588903486270260374785921452", "290029990979824778327542791591004832107", "4694094545282730263178474444865749785", "62227450157677338034391797415891040118", "60509064019048265705142759620561082034", "67021980896497332813264595199928548719", "187810852667381752014033049152242110700", "39948446155033136803993920960654103412", "146422423370932403505677957102562339665", "311351397069433103591744134670970408361", "126553933901280971939880256419614519523", "70697775443554877603261546493525169829", "213678289959242818896411257410709444974", "210465143582518657883252977961908192618", "148763613340642773638629988998698367092", "53900351324548903948914133076003233297", "265025684052021524768053845845570199410", "40931016388698900653592518280245437744", "203336959265991373672414321842894599115", "92339193722476865579368239912384904604" ] }, "id": "CVE-2024-47670-ec8fe610" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f", "signature_version": "v1", "target": { "function": "ocfs2_xattr_ibody_get", "file": "fs/ocfs2/xattr.c" }, "digest": { "function_hash": "288937491566084108907219269001443311155", "length": 1192.0 }, "id": "CVE-2024-47670-ff870794" } ]