An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24448.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "5.16.5"
}
],
"source": "DESCRIPTION"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "ac795161c93699d600db16c1a8cc23a65a1eceaf"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
{
"extracted_events": [
{
"range": [
{
"fixed": "ac795161c93699d600db16c1a8cc23a65a1eceaf"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "ab0fc21bc7105b54bafd85bd8b82742f9e68898a"
}
],
"source": "REFERENCES_COMMIT"
}
]
}