Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-26590
HistoryFeb 22, 2024 - 12:00 a.m.

CVE-2024-26590

2024-02-2200:00:00
ubuntu.com
ubuntu.com
6
linux kernel
erofs
vulnerability
fixed
compression
syzkaller
null pointer

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In the Linux kernel, the following vulnerability has been resolved: erofs:
fix inconsistent per-file compression format EROFS can select compression
algorithms on a per-file basis, and each per-file compression algorithm
needs to be marked in the on-disk superblock for initialization. However,
syzkaller can generate inconsistent crafted images that use an unsupported
algorithmtype for specific inodes, e.g. use MicroLZMA algorithmtype even
it’s not set in sbi->available_compr_algs. This can lead to an unexpected
“BUG: kernel NULL pointer dereference” if the corresponding decompressor
isn’t built-in. Fix this by checking against sbi->available_compr_algs
for each m_algorithmformat request. Incorrect !erofs_sb_has_compr_cfgs
preset bitmap is now fixed together since it was harmless previously.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%