In the Linux kernel, the following vulnerability has been resolved:
fuse: Initialize beyond-EOF page contents before setting uptodate
fusenotifystore(), unlike fusedoreadpage(), does not enable page zeroing (because it can be used to change partial page contents).
So fusenotifystore() must be more careful to fully initialize page contents (including parts of the page that are beyond end-of-file) before marking the page uptodate.
The current code can leave beyond-EOF page contents uninitialized, which makes these uninitialized page contents visible to userspace via mmap().
This is an information leak, but only affects systems which do not enable init-on-alloc (via CONFIGINITONALLOCDEFAULT_ON=y or the corresponding kernel command line parameter).
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33168db352c7b56ae18aa55c2cae1a1c5905d30e",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-0d7bcfcb"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac42e0f0eb66af966015ee33fd355bc6f5d80cd6",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-1e7c22c5"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49934861514d36d0995be8e81bb3312a499d8d9a",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-2608ba15"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1395.0,
"function_hash": "214014411153623287677318987737812210499"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac42e0f0eb66af966015ee33fd355bc6f5d80cd6",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-2e52c0b8"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1446.0,
"function_hash": "50548814232188436473318814500592645325"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49934861514d36d0995be8e81bb3312a499d8d9a",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-68f9f815"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1395.0,
"function_hash": "214014411153623287677318987737812210499"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@831433527773e665bdb635ab5783d0b95d1246f4",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-72ed72a6"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1395.0,
"function_hash": "214014411153623287677318987737812210499"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a067240817bee8a9360539af5d79a4bf5398a5",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-8e68d757"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1446.0,
"function_hash": "50548814232188436473318814500592645325"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33168db352c7b56ae18aa55c2cae1a1c5905d30e",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-977bc483"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@831433527773e665bdb635ab5783d0b95d1246f4",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-9df5d02c"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c78303eafbf85a728dd84d1750e89240c677dd9",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-a52f6af5"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1395.0,
"function_hash": "214014411153623287677318987737812210499"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c0da3d163eb32f1f91891efaade027fa9b245b9",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-c06cd2b1"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18a067240817bee8a9360539af5d79a4bf5398a5",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-de379100"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1381.0,
"function_hash": "301198939050683037252702793337115444894"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c78303eafbf85a728dd84d1750e89240c677dd9",
"target": {
"file": "fs/fuse/dev.c",
"function": "fuse_notify_store"
},
"id": "CVE-2024-44947-dfe0fbaf"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"3770993347071456090033143925573709934",
"255137218915781269878361046617800984762",
"222183065521619448793368249009989854510",
"327161608841961341536445806076167294708",
"293656857874310416567400562954202053047",
"299712584649434714795033154910895597951"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c0da3d163eb32f1f91891efaade027fa9b245b9",
"target": {
"file": "fs/fuse/dev.c"
},
"id": "CVE-2024-44947-f18e44e9"
}
]