Skip to content
5.5 Medium

CVE-2024-53101 In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and…

Description

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_mode, attr->ia_uid and attr->ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.

Affected products and versions

Product Affected versions Fixed in
Linux 6.12 earliest → < 6.12 6.12
Linux 6.11 earliest → < 6.11.9 6.11.9
Linux 6.6 earliest → < 6.6.62 6.6.62
Linux 6.1 earliest → < 6.1.118 6.1.118
Linux 5.15 earliest → < 5.15.173 5.15.173
Linux 5.10 earliest → < 5.10.230 5.10.230
Linux 5.4 earliest → < 5.4.286 5.4.286
Linux 4.19 earliest → < 4.19.324 4.19.324
Linux 2.6.39 No fix stated
Show the 4 other branches
Product Affected versions Fixed in
RUGGEDCOM RST2428P 3.2 earliest → < 3.2 3.2
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family 3.2 earliest → < 3.2 3.2
SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.2 earliest → < 3.2 3.2
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 earliest → < 1.1.1 1.1.1

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE