In the Linux kernel, the following vulnerability has been resolved:
tomoyo: don't emit warning in tomoyowritecontrol()
syzbot is reporting too large allocation warning at tomoyowritecontrol(), for one can write a very very long line without new line character. To fix this warning, I use _GFPNOWARN rather than checking for KMALLOCMAXSIZE, for practically a valid line should be always shorter than 32KB where the "too small to fail" memory-allocation rule applies.
One might try to write a valid line that is longer than 32KB, but such request will likely fail with -ENOMEM. Therefore, I feel that separately returning -EINVAL when a line is longer than KMALLOCMAXSIZE is redundant. There is no need to distinguish over-32KB and over-KMALLOCMAXSIZE.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6b37b3e12de638753bce79a2858070b9c4a4ad3",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-066e202f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-08bac2de",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@414705c0303350d139b1dc18f329fe47dfb642dd",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-5bbd9201",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c67efabddc73171c7771d3ffe4ffa1e503ee533e",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-6ebe09cc",
"signature_version": "v1",
"digest": {
"length": 1885.0,
"function_hash": "74574980485307970518150637447710416059"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9382f380e8d09209b8e5c0def0545852168be25",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-7fab8766",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3df7546fc03b8f004eee0b9e3256369f7d096685",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-7fd282fe",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-80672f87",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9382f380e8d09209b8e5c0def0545852168be25",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-8d5bd4a0",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@414705c0303350d139b1dc18f329fe47dfb642dd",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-8d796e97",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe1c021eb03dae0dc9dce55e81f77a60e419a27a",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-949e8971",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe1c021eb03dae0dc9dce55e81f77a60e419a27a",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-9935df7d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6b37b3e12de638753bce79a2858070b9c4a4ad3",
"target": {
"function": "tomoyo_write_control",
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-b30ca250",
"signature_version": "v1",
"digest": {
"length": 1865.0,
"function_hash": "232638183527181618481913274141260074442"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c67efabddc73171c7771d3ffe4ffa1e503ee533e",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-c615ca7d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3df7546fc03b8f004eee0b9e3256369f7d096685",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-caa25373",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-f9091aa5",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1",
"target": {
"file": "security/tomoyo/common.c"
},
"deprecated": false,
"id": "CVE-2024-58085-faf96366",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"172100937406202099297179090442238199297",
"68205669742944856054745315659333341192",
"256480135996032157689812151558165712443",
"149501405768819105648364403822218791204"
]
},
"signature_type": "Line"
}
]