In the Linux kernel, the following vulnerability has been resolved:
udf: fix uninit-value use in udfgetfileshortad
Check for overflow when computing alen in udfcurrentaext to mitigate later uninit-value use in udfgetfileshortad KMSAN bug[1]. After applying the patch reproducer did not trigger any issue[2].
[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df [2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@417bd613bdbe791549f7687bb1b9b8012ff111c2",
"signature_version": "v1",
"id": "CVE-2024-50143-10dca353"
},
{
"digest": {
"function_hash": "298037551809022287357489194065352802372",
"length": 1418.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4fc0d8660e391dcd8dde23c44d702be1f6846c61",
"signature_version": "v1",
"id": "CVE-2024-50143-12d66068"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e52e0b92ed31dc62afbda15c243dcee0bb5bb58d",
"signature_version": "v1",
"id": "CVE-2024-50143-13427f0d"
},
{
"digest": {
"function_hash": "294184548884031991767085050478756525825",
"length": 1429.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72e445df65a0aa9066c6fe2b8736ba2fcca6dac7",
"signature_version": "v1",
"id": "CVE-2024-50143-1386e058"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5eb76fb98b3335aa5cca6a7db2e659561c79c32b",
"signature_version": "v1",
"id": "CVE-2024-50143-380634f5"
},
{
"digest": {
"function_hash": "294184548884031991767085050478756525825",
"length": 1429.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e52e0b92ed31dc62afbda15c243dcee0bb5bb58d",
"signature_version": "v1",
"id": "CVE-2024-50143-436e8f51"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ac49babc952f48d82676979b20885e480e69be8",
"signature_version": "v1",
"id": "CVE-2024-50143-43d3a613"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4fc0d8660e391dcd8dde23c44d702be1f6846c61",
"signature_version": "v1",
"id": "CVE-2024-50143-4c2cdd16"
},
{
"digest": {
"function_hash": "294184548884031991767085050478756525825",
"length": 1429.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1ac49babc952f48d82676979b20885e480e69be8",
"signature_version": "v1",
"id": "CVE-2024-50143-5503a649"
},
{
"digest": {
"function_hash": "294184548884031991767085050478756525825",
"length": 1429.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@264db9d666ad9a35075cc9ed9ec09d021580fbb1",
"signature_version": "v1",
"id": "CVE-2024-50143-90700b63"
},
{
"digest": {
"function_hash": "298037551809022287357489194065352802372",
"length": 1418.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5eb76fb98b3335aa5cca6a7db2e659561c79c32b",
"signature_version": "v1",
"id": "CVE-2024-50143-baffb434"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72e445df65a0aa9066c6fe2b8736ba2fcca6dac7",
"signature_version": "v1",
"id": "CVE-2024-50143-cec9e874"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"271863231205789404785879511155028913673",
"169225574329115411838106932697248393597",
"271865897117313105340504223426401692849",
"277263543976215093815920898842843722292",
"306957765625099369447709189595359387520",
"284495918748287181070239085184364966837",
"302671665502781285635503098523513457151",
"115675959344619160381221095237500956437",
"289800914594881317510993847521525936995",
"112838707515733533559095764722984518498"
]
},
"target": {
"file": "fs/udf/inode.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@264db9d666ad9a35075cc9ed9ec09d021580fbb1",
"signature_version": "v1",
"id": "CVE-2024-50143-ef23fda6"
},
{
"digest": {
"function_hash": "192437965748806677149353302434106793845",
"length": 1426.0
},
"target": {
"function": "udf_current_aext",
"file": "fs/udf/inode.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@417bd613bdbe791549f7687bb1b9b8012ff111c2",
"signature_version": "v1",
"id": "CVE-2024-50143-fe941fd7"
}
]