In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr length. A malforme…
Info
Summary
In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr length. A malformed ACL can still place ACL_USER or ACL_GROUP in a slot that only contains struct f2fs_acl_entry_short bytes, and f2fs_acl_from_disk() then reads entry->e_id before verifying that a full entry fits. Require a short entry before reading e_tag and e_perm, and require a full entry before reading e_id fo…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1ddf3fd21c4c652f9cab5552515c04a166662306
- https://git.kernel.org/stable/c/442ca20c54038e2400cf28aaa944cf1de2c8e65d
- https://git.kernel.org/stable/c/4e2a96ec7236e248e706850568e0a925fd21b588
- https://git.kernel.org/stable/c/5d8a39649947a4e86c8fbc682d7fc0041b8d109a
- https://git.kernel.org/stable/c/733cd8474e6d763d75ed96f3f2b98a25480cf2b9
- https://git.kernel.org/stable/c/aba4f94ac1832c7299c33e1b4fe5f87eef6dc8f1
- https://git.kernel.org/stable/c/c4810ada31e80cbe4011467c4f3b1e93f94134f3
- https://git.kernel.org/stable/c/ff83de56882cb8466184d322abece2589258ca56
Timeline
- nvd_ingest NVD