In the Linux kernel, the following vulnerability has been resolved:
fs: Fix uninitialized value issue in fromkuid and fromkgid
ocfs2setattr() uses attr->iamode, attr->iauid and attr->iagid in a trace point even though ATTRMODE, ATTRUID and ATTR_GID aren't set.
Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTRMODE, ATTRUID, ATTR_GID are initialized, otherwise 0.
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3e612bd8f64ce62e731e95f635e06a2efe3c80c",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-062d7d01"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3853.0,
"function_hash": "216219457239632640990275144585306804866"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c28bca1256aecece6e94b26b85cd07e08b0dc90",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-0f4e9520"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3783.0,
"function_hash": "39402746629783275654322931810162990917"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17ecb40c5cc7755a321fb6148cba5797431ee5b8",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-201ae720"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17ecb40c5cc7755a321fb6148cba5797431ee5b8",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-250bc8cc"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3853.0,
"function_hash": "216219457239632640990275144585306804866"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cb5bfc5bfc651982b6203c224d49b7ddacf28bc",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-3aa3f9cb"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3853.0,
"function_hash": "216219457239632640990275144585306804866"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15f34347481648a567db67fb473c23befb796af5",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-59062329"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1c28bca1256aecece6e94b26b85cd07e08b0dc90",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-5d2ee43b"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-5ead5e65"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a72b0d3497b818d8f000c347a7c11801eb27bfc",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-6055c76c"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3715.0,
"function_hash": "260891761416764730423342436314625474999"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0c77e5e3dcbffc7c6080ccc89c037f0c86496cf",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-7a5eca47"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3833.0,
"function_hash": "194669933810328906155716541870285622102"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b3e612bd8f64ce62e731e95f635e06a2efe3c80c",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-820e15b7"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cb5bfc5bfc651982b6203c224d49b7ddacf28bc",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-9a0a2a87"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"21063949151919968147905869128345124607",
"234663036524351938357786256151555419298",
"7023270500641278612599581595229869662",
"227873701665665258902205574155678421733",
"182033937055436947826240830494391083404",
"294732422859603647110215091122030626522"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15f34347481648a567db67fb473c23befb796af5",
"target": {
"file": "fs/ocfs2/file.c"
},
"id": "CVE-2024-53101-c3ac6cd8"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 3841.0,
"function_hash": "137360477032897097147883063882596366402"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a72b0d3497b818d8f000c347a7c11801eb27bfc",
"target": {
"file": "fs/ocfs2/file.c",
"function": "ocfs2_setattr"
},
"id": "CVE-2024-53101-f0a7977c"
}
]