SUSE CVE-2023-54132

In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted image 1 with a non-compact HEAD index of clusterofs 33024 while valid numbers should be 0 lclustersize-1, which causes the following...

CVE-2023-54132

The CVE-2023-54132 details a Linux kernel erofs vulnerability: parsing a non-compact HEAD index when clusterofs is invalid can trigger a page fault (kernel crash) in z_erofs_decompress_queue handling, as seen in crafted images. Affected component is the erofs subsystem of the Linux kernel; impact...