In the Linux kernel, the following vulnerability has been resolved:
ext4: fix potential out of bound read in ext4fcreplay_scan()
For scan loop must ensure that at least EXT4FCTAGBASELEN space. If remain space less than EXT4FCTAGBASELEN which will lead to out of bound read when mounting corrupt file system image. ADD_RANGE/HEAD/TAIL is needed to add extra check when do journal scan, as this three tags will read data during scan, tag length couldn't less than data length which will read.
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"234873033921505452670984330091019977887",
"127164058154764528831541055555441942860",
"110431003667802063173005629653613275140",
"96284976036300450794961153283446111277",
"277310659147694295971384228855746012686",
"94475893607797709331757874697767292030",
"43495708162162674987537470923096415415",
"26199276972769169870386740542828283638",
"83779864793499353229128838227925682136",
"335365811289638602672558338428319308030",
"308320961988184110702346456676741744669",
"292967768416146375073791811698662720178",
"17599605725291511805160243444976128233",
"43495708162162674987537470923096415415",
"305771963683321367606269960821235372133",
"160983378498509053720419097232445981095",
"93047544166077430608025421887783435382",
"244472881485887904802161981786305028833"
]
},
"target": {
"file": "fs/ext4/fast_commit.c"
},
"signature_version": "v1",
"id": "CVE-2022-50306-3701f2fb",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b45cc5c7b920fd8bf72e5a888ec7abeadf41e09"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "116993115244676066282830795199672170641",
"length": 2266.0
},
"target": {
"file": "fs/ext4/fast_commit.c",
"function": "ext4_fc_replay"
},
"signature_version": "v1",
"id": "CVE-2022-50306-59f53c04",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b45cc5c7b920fd8bf72e5a888ec7abeadf41e09"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "116993115244676066282830795199672170641",
"length": 2266.0
},
"target": {
"file": "fs/ext4/fast_commit.c",
"function": "ext4_fc_replay"
},
"signature_version": "v1",
"id": "CVE-2022-50306-7eb1b3d7",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6969367c1500c15eddc38fda12f6d15518ad6d03"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "244263604480019813830462143905528941913",
"length": 2790.0
},
"target": {
"file": "fs/ext4/fast_commit.c",
"function": "ext4_fc_replay_scan"
},
"signature_version": "v1",
"id": "CVE-2022-50306-8d8e0a6d",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6969367c1500c15eddc38fda12f6d15518ad6d03"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"234873033921505452670984330091019977887",
"127164058154764528831541055555441942860",
"110431003667802063173005629653613275140",
"96284976036300450794961153283446111277",
"277310659147694295971384228855746012686",
"94475893607797709331757874697767292030",
"43495708162162674987537470923096415415",
"26199276972769169870386740542828283638",
"83779864793499353229128838227925682136",
"335365811289638602672558338428319308030",
"308320961988184110702346456676741744669",
"292967768416146375073791811698662720178",
"17599605725291511805160243444976128233",
"43495708162162674987537470923096415415",
"305771963683321367606269960821235372133",
"160983378498509053720419097232445981095",
"93047544166077430608025421887783435382",
"244472881485887904802161981786305028833"
]
},
"target": {
"file": "fs/ext4/fast_commit.c"
},
"signature_version": "v1",
"id": "CVE-2022-50306-955de0c5",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f234294812c9b68d603650d28743eafb718e7ad5"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "244263604480019813830462143905528941913",
"length": 2790.0
},
"target": {
"file": "fs/ext4/fast_commit.c",
"function": "ext4_fc_replay_scan"
},
"signature_version": "v1",
"id": "CVE-2022-50306-a539729f",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1b45cc5c7b920fd8bf72e5a888ec7abeadf41e09"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "244263604480019813830462143905528941913",
"length": 2790.0
},
"target": {
"file": "fs/ext4/fast_commit.c",
"function": "ext4_fc_replay_scan"
},
"signature_version": "v1",
"id": "CVE-2022-50306-abcbb26b",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f234294812c9b68d603650d28743eafb718e7ad5"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"234873033921505452670984330091019977887",
"127164058154764528831541055555441942860",
"110431003667802063173005629653613275140",
"96284976036300450794961153283446111277",
"277310659147694295971384228855746012686",
"94475893607797709331757874697767292030",
"43495708162162674987537470923096415415",
"26199276972769169870386740542828283638",
"83779864793499353229128838227925682136",
"335365811289638602672558338428319308030",
"308320961988184110702346456676741744669",
"292967768416146375073791811698662720178",
"17599605725291511805160243444976128233",
"43495708162162674987537470923096415415",
"305771963683321367606269960821235372133",
"160983378498509053720419097232445981095",
"93047544166077430608025421887783435382",
"244472881485887904802161981786305028833"
]
},
"target": {
"file": "fs/ext4/fast_commit.c"
},
"signature_version": "v1",
"id": "CVE-2022-50306-c1d34f82",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6969367c1500c15eddc38fda12f6d15518ad6d03"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "116993115244676066282830795199672170641",
"length": 2266.0
},
"target": {
"file": "fs/ext4/fast_commit.c",
"function": "ext4_fc_replay"
},
"signature_version": "v1",
"id": "CVE-2022-50306-f56b4a49",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f234294812c9b68d603650d28743eafb718e7ad5"
}
]