In the Linux kernel, the following vulnerability has been resolved:
fs: Fix uninitialized value issue in fromkuid and fromkgid
ocfs2setattr() uses attr->iamode, attr->iauid and attr->iagid in a trace point even though ATTRMODE, ATTRUID and ATTR_GID aren't set.
Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTRMODE, ATTRUID, ATTR_GID are initialized, otherwise 0.
[
{
"id": "CVE-2024-53101-062d7d01",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3e612bd8f64ce62e731e95f635e06a2efe3c80c"
},
{
"id": "CVE-2024-53101-0f4e9520",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "216219457239632640990275144585306804866",
"length": 3853.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c28bca1256aecece6e94b26b85cd07e08b0dc90"
},
{
"id": "CVE-2024-53101-201ae720",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "39402746629783275654322931810162990917",
"length": 3783.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17ecb40c5cc7755a321fb6148cba5797431ee5b8"
},
{
"id": "CVE-2024-53101-250bc8cc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17ecb40c5cc7755a321fb6148cba5797431ee5b8"
},
{
"id": "CVE-2024-53101-3aa3f9cb",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "216219457239632640990275144585306804866",
"length": 3853.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cb5bfc5bfc651982b6203c224d49b7ddacf28bc"
},
{
"id": "CVE-2024-53101-4024f8b7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9db25c2b41c34963c3ccf473b08171f87670652e"
},
{
"id": "CVE-2024-53101-59062329",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "216219457239632640990275144585306804866",
"length": 3853.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15f34347481648a567db67fb473c23befb796af5"
},
{
"id": "CVE-2024-53101-5d2ee43b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c28bca1256aecece6e94b26b85cd07e08b0dc90"
},
{
"id": "CVE-2024-53101-5ead5e65",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf"
},
{
"id": "CVE-2024-53101-6055c76c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a72b0d3497b818d8f000c347a7c11801eb27bfc"
},
{
"id": "CVE-2024-53101-7a5eca47",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "260891761416764730423342436314625474999",
"length": 3715.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf"
},
{
"id": "CVE-2024-53101-820e15b7",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "194669933810328906155716541870285622102",
"length": 3833.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3e612bd8f64ce62e731e95f635e06a2efe3c80c"
},
{
"id": "CVE-2024-53101-9a0a2a87",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cb5bfc5bfc651982b6203c224d49b7ddacf28bc"
},
{
"id": "CVE-2024-53101-c3ac6cd8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"target": {
"file": "fs/ocfs2/file.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15f34347481648a567db67fb473c23befb796af5"
},
{
"id": "CVE-2024-53101-f0a7977c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "137360477032897097147883063882596366402",
"length": 3841.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a72b0d3497b818d8f000c347a7c11801eb27bfc"
},
{
"id": "CVE-2024-53101-f4552b27",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "39402746629783275654322931810162990917",
"length": 3783.0
},
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9db25c2b41c34963c3ccf473b08171f87670652e"
}
]