Junglewise Threat Intelligence

CVE-2024-41016: Linux Kernel OCFS2 out-of-bounds access in ocfs2_xattr_find_entry

CVE-2024-41016 · Severity: medium · CVSS 5.5 · Published 2024-07-29

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability exists in the Linux kernel's OCFS2 file system, which is used for managing shared storage in clustered environments. An attacker could use a specially crafted, malicious disk image to trigger a system crash or instability. This issue primarily affects the availability of the system rather than the confidentiality of user data.

Technical details

The vulnerability is located in the 'ocfs2_xattr_find_entry()' function within the OCFS2 file system implementation. It stems from a lack of strict bounds checking before performing a memory comparison (memcmp) on extended attributes (xattrs). Specifically, 'non-indexed' xattrs may be saved with additional space, and without proper validation, a crafted malicious filesystem image can cause the kernel to perform an out-of-bounds memory access. This can lead to a kernel panic or system crash. The fix introduces a check to ensure the memory offset and name length do not exceed the allocated buffer end before calling memcmp.

Affected products

  • Linux Linux Kernel up to 4.19.323, 4.20 to 5.4.285, 5.5 to 5.10.227, 5.11 to 5.15.168, 5.16 to 6.1.112, 6.2 to 6.6.53, 6.7 to 6.10.12

Timeline

  • 2024-05-20: other: Patch authored
  • 2024-06-24: patched: Mainline patch committed
  • 2024-07-29: disclosed: CVE published

References

Related threats