Namjae JeonandGreg Kroah-Hartman 0d53178a3d exfat: fix uninit-value in __exfat_get_dentry_set ...

commit 02dffe9ab0 upstream.

There is no check if stream size and start_clu are invalid.
If start_clu is EOF cluster and stream size is 4096, It will
cause uninit value access. because ei->hint_femp.eidx could
be 128(if cluster size is 4K) and wrong hint will allocate
next cluster. and this cluster will be same with the cluster
that is allocated by exfat_extend_valid_size(). The previous
patch will check invalid start_clu, but for clarity, initialize
hint_femp.eidx to zero.

Cc: stable@vger.kernel.org
Reported-by: syzbot+01218003be74b5e1213a@syzkaller.appspotmail.com
Tested-by: syzbot+01218003be74b5e1213a@syzkaller.appspotmail.com
Reviewed-by: Yuezhang Mo <Yuezhang.Mo@sony.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-12-09 10:32:45 +01:00

..

9p

fs/9p: fix uninitialized values during inode evict

2024-11-22 15:38:37 +01:00

adfs

…

affs

…

afs

afs: Fix missing subdir edit when renamed between parent dirs

2024-11-08 16:28:20 +01:00

autofs

…

befs

…

bfs

…

btrfs

btrfs: do not BUG_ON() when freeing tree block after error

2024-12-09 10:32:41 +01:00

cachefiles

cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()

2024-12-09 10:31:45 +01:00

ceph

ceph: fix cap ref leak via netfs init_request

2024-10-10 11:57:59 +02:00

coda

…

configfs

…

cramfs

fs: Convert to bdev_open_by_dev()

2024-08-19 06:04:25 +02:00

crypto

fs: Create a generic is_dot_dotdot() utility

2024-10-04 16:29:48 +02:00

debugfs

debugfs: fix automount d_fsdata usage

2024-01-20 11:51:37 +01:00

devpts

…

dlm

dlm: fix user space lock decision to copy lvb

2024-06-12 11:11:38 +02:00

ecryptfs

fs: Create a generic is_dot_dotdot() utility

2024-10-04 16:29:48 +02:00

efivarfs

efivarfs: Request at most 512 bytes for variable names

2024-03-06 14:48:41 +00:00

efs

…

erofs

erofs: handle NONHEAD !delta[1] lclusters gracefully

2024-12-09 10:32:11 +01:00

exfat

exfat: fix uninit-value in __exfat_get_dentry_set

2024-12-09 10:32:45 +01:00

exportfs

…

ext2

ext2: Verify bitmap and itable block numbers before using them

2024-08-03 08:54:15 +02:00

ext4

ext4: fix FS_IOC_GETFSMAP handling

2024-12-09 10:32:42 +01:00

f2fs

f2fs: fix null reference error when checking end of zone

2024-12-09 10:32:41 +01:00

fat

fat: fix uninitialized variable

2024-10-22 15:46:20 +02:00

freevxfs

…

fscache

netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING

2024-12-09 10:31:45 +01:00

fuse

fuse: fix memory leak in fuse_create_open

2024-09-12 11:11:26 +02:00

gfs2

gfs2: Remove and replace gfs2_glock_queue_work

2024-12-09 10:32:38 +01:00

hfs

hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()

2024-08-03 08:54:15 +02:00

hfsplus

hfsplus: don't query the device logical block size multiple times

2024-12-09 10:31:45 +01:00

hostfs

hostfs: fix dev_t handling

2024-08-03 08:54:22 +02:00

hpfs

…

hugetlbfs

mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE

2024-02-23 09:25:16 +01:00

iomap

iomap: turn iomap_want_unshare_iter into an inline function

2024-11-08 16:28:19 +01:00

isofs

isofs: handle CDs with bad root inode but good Joliet root directory

2024-04-13 13:07:34 +02:00

jbd2

jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit

2024-10-10 11:57:50 +02:00

jffs2

jffs2: Fix potential illegal address access in jffs2_free_inode

2024-07-11 12:49:09 +02:00

jfs

jfs: xattr: check invalid xattr size more strictly

2024-12-09 10:32:42 +01:00

kernfs

kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files

2024-08-29 17:33:33 +02:00

lockd

nfsd: stop setting ->pg_stats for unused stats

2024-08-19 06:04:23 +02:00

minix

…

netfs

…

nfs

nfs: Fix KMSAN warning in decode_getfattr_attrs()

2024-11-14 13:19:37 +01:00

nfs_common

…

nfsd

NFSD: Fix nfsd4_shutdown_copy()

2024-12-09 10:32:30 +01:00

nilfs2

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

2024-11-22 15:38:34 +01:00

nls

…

notify

fsnotify: fix sending inotify event with unexpected filename

2024-12-09 10:32:44 +01:00

ntfs

…

ntfs3

fs/ntfs3: Sequential field availability check in mi_enum_attr()

2024-11-08 16:28:28 +01:00

ocfs2

ocfs2: fix uninitialized value in ocfs2_file_read_iter()

2024-12-09 10:32:20 +01:00

omfs

…

openpromfs

openpromfs: finish conversion to the new mount API

2024-06-12 11:11:30 +02:00

orangefs

orangefs: fix out-of-bounds fsid access

2024-07-11 12:49:08 +02:00

overlayfs

ovl: fail if trusted xattrs are needed but caller lacks permission

2024-10-10 11:57:44 +02:00

proc

fs/proc/kcore.c: fix coccinelle reported ERROR instances

2024-12-09 10:32:18 +01:00

pstore

pstore/zone: Add a null pointer check to the psz_kmsg_read

2024-04-13 13:07:31 +02:00

qnx4

…

qnx6

…

quota

quota: Remove BUG_ON from dqget()

2024-08-29 17:33:33 +02:00

ramfs

…

reiserfs

reiserfs: fix uninit-value in comp_keys

2024-08-19 06:04:26 +02:00

romfs

fs: Convert to bdev_open_by_dev()

2024-08-19 06:04:25 +02:00

smb

smb: cached directories can be more than root file handle

2024-12-09 10:32:23 +01:00

squashfs

Squashfs: sanity check symbolic link size

2024-09-12 11:11:39 +02:00

sysfs

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

2024-04-27 17:11:41 +02:00

sysv

sysv: don't call sb_bread() with pointers_lock held

2024-04-13 13:07:34 +02:00

tracefs

eventfs: Use list_del_rcu() for SRCU protected list variable

2024-09-12 11:11:27 +02:00

ubifs

Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"

2024-10-10 11:58:09 +02:00

udf

udf: fix uninit-value use in udf_get_fileshortad

2024-11-01 01:58:28 +01:00

ufs

…

unicode

unicode: Fix utf8_load() error path

2024-12-09 10:32:12 +01:00

vboxsf

vboxsf: explicitly deny setlease attempts

2024-05-17 12:02:13 +02:00

verity

fsverity: use register_sysctl_init() to avoid kmemleak warning

2024-06-16 13:47:33 +02:00

xfs

xfs: add bounds checking to xlog_recover_process_data

2024-12-09 10:32:39 +01:00

zonefs

zonefs: Improve error handling

2024-02-23 09:25:13 +01:00

aio.c

fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion

2024-04-03 15:28:44 +02:00

anon_inodes.c

…

attr.c

…

bad_inode.c

…

binfmt_elf_fdpic.c

fs: binfmt_elf_efpic: don't use missing interpreter's properties

2024-08-29 17:33:33 +02:00

binfmt_elf_test.c

…

binfmt_elf.c

ELF: fix kernel.randomize_va_space double read

2024-09-12 11:11:29 +02:00

binfmt_flat.c

binfmt_flat: Fix corruption when not offsetting data start

2024-08-19 06:04:30 +02:00

binfmt_misc.c

binfmt_misc: cleanup on filesystem umount

2024-08-29 17:33:27 +02:00

binfmt_script.c

…

buffer.c

ext4: sanity check for NULL pointer after ext4_force_shutdown

2024-08-19 06:04:29 +02:00

char_dev.c

…

compat_binfmt_elf.c

…

coredump.c

…

d_path.c

…

dax.c

fsdax: dax_unshare_iter needs to copy entire blocks

2024-11-08 16:28:19 +01:00

dcache.c

fs: better handle deep ancestor chains in is_subdir()

2024-07-25 09:50:54 +02:00

direct-io.c

…

drop_caches.c

…

eventfd.c

…

eventpoll.c

epoll: be better about file lifetimes

2024-06-12 11:11:30 +02:00

exec.c

exec: don't WARN for racy path_noexec check

2024-11-01 01:58:27 +01:00

fcntl.c

fs: Fix file_set_fowner LSM hook inconsistencies

2024-10-04 16:29:56 +02:00

fhandle.c

fs: Annotate struct file_handle with __counted_by() and use struct_size()

2024-08-19 06:04:28 +02:00

file_table.c

…

file.c

close_range(): fix the logics in descriptor table trimming

2024-10-10 11:58:00 +02:00

filesystems.c

…

fs_context.c

…

fs_parser.c

…

fs_pin.c

…

fs_struct.c

…

fs_types.c

…

fs-writeback.c

fs/writeback: bail out if there is no more inodes for IO and queued once

2024-06-27 13:49:00 +02:00

fsopen.c

…

init.c

…

inode.c

fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

2024-12-09 10:31:41 +01:00

internal.h

…

ioctl.c

lsm: new security_file_ioctl_compat() hook

2024-01-31 16:18:54 -08:00

Kconfig

…

Kconfig.binfmt

…

kernel_read_file.c

…

libfs.c

fs: new accessor methods for atime and mtime

2024-01-05 15:19:40 +01:00

locks.c

filelock: Fix fcntl/close race recovery compat path

2024-07-27 11:34:10 +02:00

Makefile

…

mbcache.c

…

mnt_idmapping.c

…

mount.h

…

mpage.c

…

namei.c

fs: Create a generic is_dot_dotdot() utility

2024-10-04 16:29:48 +02:00

namespace.c

mount: handle OOM on mnt_warn_timestamp_expiry

2024-10-04 16:28:51 +02:00

nsfs.c

…

open.c

openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)

2024-11-01 01:58:32 +01:00

pipe.c

fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()

2024-04-10 16:35:57 +02:00

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

…

readdir.c

…

remap_range.c

…

select.c

fs/select: rework stack allocation hack for clang

2024-03-26 18:19:17 -04:00

seq_file.c

…

signalfd.c

…

splice.c

…

stack.c

…

stat.c

…

statfs.c

…

super.c

fs: Convert to bdev_open_by_dev()

2024-08-19 06:04:25 +02:00

sync.c

…

sysctls.c

…

timerfd.c

…

userfaultfd.c

Fix userfaultfd_api to return EINVAL as expected

2024-07-18 13:21:22 +02:00

utimes.c

…

xattr.c

vfs: Fix potential circular locking through setxattr() and removexattr()

2024-09-12 11:11:38 +02:00