Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ext4: use memtostr_pad() for s_volume_name As with the other strings in struct ext4_super_block, s_volume_name is not NUL terminated. The other strings were marked in commit 072ebb3bffe6 ("ext4: add nonstring annotations to ext4.h"). Using strscpy() isn't the right replacement for strncpy(); it should use memtostr_pad() instead.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 744a56389f7398f286231e062c2e63f0de01bcc6 before 4378be89ddb7de88d984b67ecfd6191686c42817; affected 744a56389f7398f286231e062c2e63f0de01bcc6 before be27cd64461c45a6088a91a04eba5cd44e1767ef |
| Linux / Linux | affected 6.10; unaffected 0 before 6.10; unaffected 6.10.1 through 6.10.*; unaffected 6.11 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/4378be89ddb7de88d984b67ecfd6191686c42817
- https://git.kernel.org/stable/c/be27cd64461c45a6088a91a04eba5cd44e1767ef
ADP enrichment
No English description supplied.
No references supplied.