Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is the same and out-of-range, let's add sanity check on f2fs_alloc_nid() to detect any potential corruption in free_nid_list.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 before 88b2ddb0c4f1dc874d4598e78cc830c64315ed86; affected 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 before 9337ed5e777e1c19854928cba7a8131dd00e611b; affected 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 before 6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa; affected 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 before adbcb34f03abb89e681a5907c4c3ce4bf224991d; affected 98e4da8ca301e062d79ae168c67e56f3c3de3ce4 before 8fc6056dcf79937c46c97fa4996cda65956437a9 |
| Linux / Linux | affected 3.8; unaffected 0 before 3.8; unaffected 6.1.175 through 6.1.*; unaffected 6.6.140 through 6.6.*; unaffected 6.12.58 through 6.12.*; unaffected 6.17.8 through 6.17.*; unaffected 6.18 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/88b2ddb0c4f1dc874d4598e78cc830c64315ed86
- https://git.kernel.org/stable/c/9337ed5e777e1c19854928cba7a8131dd00e611b
- https://git.kernel.org/stable/c/6b9525596a83cd5b7bbc2c7bd5f9ad9cf5ad60fa
- https://git.kernel.org/stable/c/adbcb34f03abb89e681a5907c4c3ce4bf224991d
- https://git.kernel.org/stable/c/8fc6056dcf79937c46c97fa4996cda65956437a9