In the Linux kernel, the following vulnerability has been resolved:
ocfs2: mount fails with buffer overflow in strlen
Starting with kernel 5.11 built with CONFIG_FORTIFY_SOURCE mouting an ocfs2 filesystem with either o2cb or pcmk cluster stack fails with the trace below. Problem seems to be that strings for cluster stack and cluster name are not guaranteed to be null terminated in the disk representation, while strlcpy assumes that the source string is always null terminated. This causes a read outside of the source string triggering the buffer overflow detection.
detected buffer overflow in strlen ------------[ cut here ]------------ kernel BUG at lib/string.c:1149! invalid opcode: 0000 [#1] SMP PTI CPU: 1 PID: 910 Comm: mount.ocfs2 Not tainted 5.14.0-1-amd64 #1 Debian 5.14.6-2 RIP: 0010:fortify_panic+0xf/0x11 ... Call Trace: ocfs2_initialize_super.isra.0.cold+0xc/0x18 [ocfs2] ocfs2_fill_super+0x359/0x19b0 [ocfs2] mount_bdev+0x185/0x1b0 legacy_get_tree+0x27/0x40 vfs_get_tree+0x25/0xb0 path_mount+0x454/0xa20 __x64_sys_mount+0x103/0x140 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-syms-rt | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-azure-fde-5.15Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-ibmUpgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-hweUpgrade linux-gkeopUpgrade linux-kvm | Nov 19, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub