CVE-2024-49900

CVE Details

Release Date:

2024-10-21

Description

In the Linux kernel, the following vulnerability has been resolved:\njfs: Fix uninit-value access of new_ea in ea_buffer\nsyzbot reports that lzo1x_1_do_compress is using uninit-value:\n=====================================================\nBUG: KMSAN: uninit-value in lzo1x_1_do_compress+0x19f9/0x2510 lib/lzo/lzo1x_compress.c:178\n...\nUninit was stored to memory at:\nea_put fs/jfs/xattr.c:639 [inline]\n...\nLocal variable ea_buf created at:\n__jfs_setxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662\n__jfs_xattr_set+0xe6/0x1f0 fs/jfs/xattr.c:934\n=====================================================\nThe reason is ea_buf->new_ea is not initialized properly.\nFix this by using memset to empty its content at the beginning\nin ea_get().

See more information about CVE-2024-49900 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v3 metrics

Base Score:	7.1
Vector String:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Version:	3.1
Attack Vector:	Local
Attack Complexity:	Low
Privileges Required:	Low
User Interaction:	None
Scope:	Unchanged
Confidentiality:	High
Integrity:	None
Availability:	High

Errata information

Platform	Errata	Release Date
Oracle Linux version 7 (kernel-uek)	ELSA-2024-12884	2024-12-16
Oracle Linux version 8 (kernel-uek)	ELSA-2024-12884	2024-12-16