-

CVE-2022-50864

nilfs2: fix shift-out-of-bounds due to too large exponent of block size

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix shift-out-of-bounds due to too large exponent of block size

If field s_log_block_size of superblock data is corrupted and too large,
init_nilfs() and load_nilfs() still can trigger a shift-out-of-bounds
warning followed by a kernel panic (if panic_on_warn is set):

 shift exponent 38973 is too large for 32-bit type 'int'
 Call Trace:
  <TASK>
  dump_stack_lvl+0xcd/0x134
  ubsan_epilogue+0xb/0x50
  __ubsan_handle_shift_out_of_bounds.cold.12+0x17b/0x1f5
  init_nilfs.cold.11+0x18/0x1d [nilfs2]
  nilfs_mount+0x9b5/0x12b0 [nilfs2]
  ...

This fixes the issue by adding and using a new helper function for getting
block size with sanity check.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f
Version < ec93b5430ec0f60877a5388bb023d60624f9ab9f
Status affected
Version 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f
Version < 8b6ef451b5701b37d9a5905534595776a662edfc
Status affected
Version 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f
Version < ddb6615a168f97b91175e00eda4c644741cf531c
Status affected
Version 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f
Version < a16731fa1b96226c75bbf18e73513b14fc318360
Status affected
Version 8a9d2191e9f43bbcd256a9a6871bd73434c83f2f
Version < ebeccaaef67a4895d2496ab8d9c2fb8d89201211
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.30
Status affected
Version 0
Version < 2.6.30
Status unaffected
Version <= 5.10.*
Version 5.10.163
Status unaffected
Version <= 5.15.*
Version 5.15.86
Status unaffected
Version <= 6.0.*
Version 6.0.16
Status unaffected
Version <= 6.1.*
Version 6.1.2
Status unaffected
Version <= *
Version 6.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.101
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.