In the Linux kernel, the following vulnerability has been resolved:
jfs: Fix uninit-value access of newea in eabuffer
syzbot reports that lzo1x1do_compress is using uninit-value:
===================================================== BUG: KMSAN: uninit-value in lzo1x1docompress+0x19f9/0x2510 lib/lzo/lzo1xcompress.c:178
...
Uninit was stored to memory at: ea_put fs/jfs/xattr.c:639 [inline]
...
Local variable eabuf created at: _jfssetxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662 _jfsxattrset+0xe6/0x1f0 fs/jfs/xattr.c:934
=====================================================
The reason is eabuf->newea is not initialized properly.
Fix this by using memset to empty its content at the beginning in ea_get().
[
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-0ca43acd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b24d41d47a6805c45378debf8bd115675d41da8",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-35cd7532",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c244d5b48284a770d96ff703df2dfeadf804a73",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-4accae1f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad8b531de79c348bcb8133e7f5e827b884226af",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-4b138f0b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7444f91a9f93eaa48827087ed0f3381c194181d",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-5bf5f6b0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6041536d18c5f51a84bc37cd568cbab61870031e",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-60b85786",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad8b531de79c348bcb8133e7f5e827b884226af",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-684d38fd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6041536d18c5f51a84bc37cd568cbab61870031e",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-910dd376",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d7444f91a9f93eaa48827087ed0f3381c194181d",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-98aa56ed",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dac398ed272a378d2f42ac68ae408333a51baf52",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-b48e9229",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dac398ed272a378d2f42ac68ae408333a51baf52",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-bfd4659c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7b24d41d47a6805c45378debf8bd115675d41da8",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-c8cf5882",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8b1dcf25c26d42e4a68c4725ce52a0543c7878cc",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-c916c47f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c244d5b48284a770d96ff703df2dfeadf804a73",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-cb093a82",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b59ffad47db1c46af25ccad157bb3b25147c35c",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-cc4e6319",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b59ffad47db1c46af25ccad157bb3b25147c35c",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-dd0b0786",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8b1dcf25c26d42e4a68c4725ce52a0543c7878cc",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
},
{
"digest": {
"function_hash": "158933247799983735772070316474836563495",
"length": 3392.0
},
"id": "CVE-2024-49900-f1c9295c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c076b3746224982eebdba5c9e4b1467e146c0d64",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "ea_get",
"file": "fs/jfs/xattr.c"
},
"signature_type": "Function"
},
{
"digest": {
"line_hashes": [
"140003617006923065989133326030220227617",
"27572300705119045314464751536543464858",
"333061387286462571029716721446090608665"
],
"threshold": 0.9
},
"id": "CVE-2024-49900-fcd62180",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c076b3746224982eebdba5c9e4b1467e146c0d64",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "fs/jfs/xattr.c"
},
"signature_type": "Line"
}
]