AZL-53769 CVE-2024-50265 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2xaremove Syzkaller is able to provoke null-ptr-dereference in ocfs2xaremove: 57.319872 a.out,1161,7:ocfs2xaremove:2028 ERROR: status = -12 57.320420...

CVE-2024-50265

CVE-2024-50265 concerns the Linux kernel OCFS2 XATTR handling. The issue arises in ocfs2_xa_remove() where, after a fault-injected -ENOMEM path, a faulty rc path causes the code to call ocfs2_xa_remove_entry(loc) twice: first from ocfs2_xa_cleanup_value_truncate() and then again when returning to...