CVE-2024-26590

Source
https://cve.org/CVERecord?id=CVE-2024-26590
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26590.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26590
Downstream
Related
Published
2024-02-22T16:13:34.315Z
Modified
2026-04-02T10:04:53.153909Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
erofs: fix inconsistent per-file compression format
Details

In the Linux kernel, the following vulnerability has been resolved:

erofs: fix inconsistent per-file compression format

EROFS can select compression algorithms on a per-file basis, and each per-file compression algorithm needs to be marked in the on-disk superblock for initialization.

However, syzkaller can generate inconsistent crafted images that use an unsupported algorithmtype for specific inodes, e.g. use MicroLZMA algorithmtype even it's not set in sbi->available_compr_algs. This can lead to an unexpected "BUG: kernel NULL pointer dereference" if the corresponding decompressor isn't built-in.

Fix this by checking against sbi->available_compr_algs for each malgorithmformat request. Incorrect !erofssbhascompr_cfgs preset bitmap is now fixed together since it was harmless previously.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26590.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8f89926290c4b3d31748d5089b27952243be0693
Fixed
47467e04816cb297905c0f09bc2d11ef865942d9
Fixed
823ba1d2106019ddf195287ba53057aee33cf724
Fixed
eed24b816e50c6cd18cbee0ff0d7218c8fced199
Fixed
118a8cf504d7dfa519562d000f423ee3ca75d2c4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26590.json"