In the Linux kernel, the following vulnerability has been resolved:
NFSD: Prevent a potential integer overflow
If the tag length is >= U32MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decodecb_compound4res() does not have to perform arithmetic on the unsafe length value.
[
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dde654cad08fdaac370febb161ec41eb58e9d2a2",
"signature_version": "v1",
"id": "CVE-2024-53146-0c367a80"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de53c5305184ca1333b87e695d329d1502d694ce",
"signature_version": "v1",
"id": "CVE-2024-53146-176428cd"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de53c5305184ca1333b87e695d329d1502d694ce",
"signature_version": "v1",
"id": "CVE-2024-53146-1f1e7f3f"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90adbae9dd158da8331d9fdd32077bd1af04f553",
"signature_version": "v1",
"id": "CVE-2024-53146-36b5bfdc"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@745f7ce5a95e783ba62fe774325829466aec2aa8",
"signature_version": "v1",
"id": "CVE-2024-53146-4c54c95a"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c5f545c9a1f8a1869246f6f3ae8c17289d6a841",
"signature_version": "v1",
"id": "CVE-2024-53146-6249b87d"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd3394f9a7200d6b088553bf38e688620cd27af",
"signature_version": "v1",
"id": "CVE-2024-53146-669afc0b"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@842f1c27a1aef5367e535f9e85c8c3b06352151a",
"signature_version": "v1",
"id": "CVE-2024-53146-6bb70f5a"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd3394f9a7200d6b088553bf38e688620cd27af",
"signature_version": "v1",
"id": "CVE-2024-53146-7f2e8a8c"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dde654cad08fdaac370febb161ec41eb58e9d2a2",
"signature_version": "v1",
"id": "CVE-2024-53146-81d14e50"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@084f797dbc7e52209a4ab6dbc7f0109268754eb9",
"signature_version": "v1",
"id": "CVE-2024-53146-85ad55fe"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@745f7ce5a95e783ba62fe774325829466aec2aa8",
"signature_version": "v1",
"id": "CVE-2024-53146-876486d0"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f33b92e5b18e904a481e6e208486da43e4dc841",
"signature_version": "v1",
"id": "CVE-2024-53146-9c0bf183"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f33b92e5b18e904a481e6e208486da43e4dc841",
"signature_version": "v1",
"id": "CVE-2024-53146-ba0d13e5"
},
{
"digest": {
"function_hash": "322277145855219869426939067607657247664",
"length": 431.0
},
"signature_type": "Function",
"target": {
"function": "decode_cb_compound4res",
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@842f1c27a1aef5367e535f9e85c8c3b06352151a",
"signature_version": "v1",
"id": "CVE-2024-53146-c8f442bf"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@084f797dbc7e52209a4ab6dbc7f0109268754eb9",
"signature_version": "v1",
"id": "CVE-2024-53146-cb4558b4"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90adbae9dd158da8331d9fdd32077bd1af04f553",
"signature_version": "v1",
"id": "CVE-2024-53146-db98355e"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"206344191247041609609450361833684108765",
"231139098719525818009944417523531039113",
"27393193907024977088309845423209394214",
"337112010033497010482780511947046217232",
"147425641422097145254656406010594459713",
"294237981837129513556349911480177323097",
"175070234546460879797471464771009175966",
"166925666530331318667405123280357017233",
"72094167503486763139175745141191801565",
"247063894885731471846803927023124140753",
"69206203704314355540330996270635899352",
"336915457887016468465194659898629388195",
"215919472605517299179944934731206125963"
]
},
"signature_type": "Line",
"target": {
"file": "fs/nfsd/nfs4callback.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c5f545c9a1f8a1869246f6f3ae8c17289d6a841",
"signature_version": "v1",
"id": "CVE-2024-53146-e2b3883a"
}
]