Bug 2334353 (CVE-2024-53235) - CVE-2024-53235 kernel: erofs: fix file-backed mounts over FUSE
Summary: CVE-2024-53235 kernel: erofs: fix file-backed mounts over FUSE
Keywords:
Status: NEW
Alias: CVE-2024-53235
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-12-27 14:01 UTC by OSIDB Bzimport
Modified: 2025-01-20 06:06 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-12-27 14:01:20 UTC
In the Linux kernel, the following vulnerability has been resolved:

erofs: fix file-backed mounts over FUSE

syzbot reported a null-ptr-deref in fuse_read_args_fill:
 fuse_read_folio+0xb0/0x100 fs/fuse/file.c:905
 filemap_read_folio+0xc6/0x2a0 mm/filemap.c:2367
 do_read_cache_folio+0x263/0x5c0 mm/filemap.c:3825
 read_mapping_folio include/linux/pagemap.h:1011 [inline]
 erofs_bread+0x34d/0x7e0 fs/erofs/data.c:41
 erofs_read_superblock fs/erofs/super.c:281 [inline]
 erofs_fc_fill_super+0x2b9/0x2500 fs/erofs/super.c:625

Unlike most filesystems, some network filesystems and FUSE need
unavoidable valid `file` pointers for their read I/Os [1].
Anyway, those use cases need to be supported too.

[1] https://docs.kernel.org/filesystems/vfs.html

Comment 1 Avinash Hanwate 2024-12-28 15:12:17 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024122738-CVE-2024-53235-80a9@gregkh/T


Note You need to log in before you can comment on or make changes to this bug.