In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds in diNewExt
[Syz report] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:2360:2 index -878706688 is out of range for type 'struct iagctl[128]' CPU: 1 PID: 5065 Comm: syz-executor282 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0x11c/0x150 lib/ubsan.c:348 diNewExt+0x3cf3/0x4000 fs/jfs/jfs_imap.c:2360 diAllocExt fs/jfs/jfs_imap.c:1949 [inline] diAllocAG+0xbe8/0x1e50 fs/jfs/jfs_imap.c:1666 diAlloc+0x1d3/0x1760 fs/jfs/jfs_imap.c:1587 ialloc+0x8f/0x900 fs/jfs/jfs_inode.c:56 jfs_mkdir+0x1c5/0xb90 fs/jfs/namei.c:225 vfs_mkdir+0x2f1/0x4b0 fs/namei.c:4106 do_mkdirat+0x264/0x3a0 fs/namei.c:4129 __do_sys_mkdir fs/namei.c:4149 [inline] __se_sys_mkdir fs/namei.c:4147 [inline] __x64_sys_mkdir+0x6e/0x80 fs/namei.c:4147 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7fcb7e6a0b57 Code: ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd83023038 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fcb7e6a0b57 RDX: 00000000000a1020 RSI: 00000000000001ff RDI: 0000000020000140 RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000286 R12: 00007ffd830230d0 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[Analysis] When the agstart is too large, it can cause agno overflow.
[Fix] After obtaining agno, if the value is invalid, exit the subsequent process.
Modified the test from agno > MAXAG to agno >= MAXAG based on linux-next report by kernel test robot (Dan Carpenter).
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvell | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-hweUpgrade linux-image-intelUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oracleUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1129-azureUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-awsUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gke | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub