ocfs2：向 ocfs2_xattr_find_entry() 添加边界检查 (CVE-2024-47670)

CVE编号

CVE-2024-47670

利用情况

暂无

补丁情况

N/A

披露时间

2024-10-09

漏洞描述

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_xattr_find_entry() Add a paranoia check to make sure it doesn't stray beyond valid memory region containing ocfs2 xattr entries when scanning for a match. It will prevent out-of-bound access in case of crafted images.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://git.kernel.org/stable/c/1f6e167d6753fe3ea493cdc7f7de8d03147a4d39
https://git.kernel.org/stable/c/8e7bef408261746c160853fc27df3139659f5f77
https://git.kernel.org/stable/c/9b32539590a8e6400ac2f6e7cf9cbb8e08711a2f
https://git.kernel.org/stable/c/9e3041fecdc8f78a5900c3aa51d3d756e73264d6

CVSS3评分 N/A

• 攻击路径 N/A
• 攻击复杂度 N/A
• 权限要求 N/A
• 影响范围 N/A
• 用户交互 N/A
• 可用性 N/A
• 保密性 N/A
• 完整性 N/A

N/A

CWE-ID	漏洞类型

Exp相关链接

- avd.aliyun.com