CVE-2022-50567
Description
In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp->db_agl2size. The field can be greater than 64 and trigger the shift-out-of-bounds. Fix this bug by adding a check of bmp->db_agl2size in dbMount since this field is used in many following functions. The upper bound for this field is L2MAXL2SIZE - L2MAXAG, thanks for the help of Dave Kleikamp. Note that, for maintenance, I reorganized error handling code of dbMount.
How to fix
- Linux Linuxd3b486946a4e62c7ef6023f7d9c1d049051384ba, 3115313cf03113e87c87adee18ee49a20bbdb9ba, eea87acb6027be3dd4d3c57186bb22800d57fdda, 359616ce587e524107730504891afa4b1a8be58c, 3e997e4ce8ae7ab89d72334120f6aee49c5bbdbd, 0536f76a2bca83d1a3740517ba22cc93a44b3099, 2c575c8905f7a8b32d5611b91856b69bac2a5bf1, 67973caae78e21ee46a7281aaa8ca364eb9c444f, 898f706695682b9954f280d95e49fa86ffa55d08 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < d3b486946a4e62c7ef6023f7d9c1d049051384ba, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 3115313cf03113e87c87adee18ee49a20bbdb9ba, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < eea87acb6027be3dd4d3c57186bb22800d57fdda, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 359616ce587e524107730504891afa4b1a8be58c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 3e997e4ce8ae7ab89d72334120f6aee49c5bbdbd, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 0536f76a2bca83d1a3740517ba22cc93a44b3099, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 2c575c8905f7a8b32d5611b91856b69bac2a5bf1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 67973caae78e21ee46a7281aaa8ca364eb9c444f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 898f706695682b9954f280d95e49fa86ffa55d08, 2.6.12 | d3b486946a4e62c7ef6023f7d9c1d049051384ba, 3115313cf03113e87c87adee18ee49a20bbdb9ba, eea87acb6027be3dd4d3c57186bb22800d57fdda, 359616ce587e524107730504891afa4b1a8be58c, 3e997e4ce8ae7ab89d72334120f6aee49c5bbdbd, 0536f76a2bca83d1a3740517ba22cc93a44b3099, 2c575c8905f7a8b32d5611b91856b69bac2a5bf1, 67973caae78e21ee46a7281aaa8ca364eb9c444f, 898f706695682b9954f280d95e49fa86ffa55d08 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.