CVE-2024-26791

2024-04-0400:00:00

ubuntu.com

linux kernel

vulnerability

btrfs

device names

validation

syzbot

out of bounds

getname_kernel

buffer initialization

edward adam davis

security fix

AI Score

7.6

Confidence

High

EPSS

Percentile

13.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: btrfs:
dev-replace: properly validate device names There’s a syzbot report that
device name buffers passed to device replace are not properly checked for
string termination which could lead to a read out of bounds in
getname_kernel(). Add a helper that validates both source and target device
name buffers. For devid as the source initialize the buffer to empty string
in case something tries to read it later. This was originally analyzed and
fixed in a different way by Edward Adam Davis (see links).

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-186.206UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-112.122UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1126.136UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1063.69UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1063.69~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1126.136~18.04.1UNKNOWN
ubuntu22.04noarchlinux-aws-6.5< anyUNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1131.138UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1066.75UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-186.206	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-112.122	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1126.136	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1063.69	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1063.69~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1126.136~18.04.1	UNKNOWN
ubuntu	22.04	noarch	linux-aws-6.5	< any	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1131.138	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1066.75	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< any	UNKNOWN