Namjae JeonandGreg Kroah-Hartman d84150aab3 exfat: fix uninit-value in __exfat_get_dentry_set ...

commit 02dffe9ab0 upstream.

There is no check if stream size and start_clu are invalid.
If start_clu is EOF cluster and stream size is 4096, It will
cause uninit value access. because ei->hint_femp.eidx could
be 128(if cluster size is 4K) and wrong hint will allocate
next cluster. and this cluster will be same with the cluster
that is allocated by exfat_extend_valid_size(). The previous
patch will check invalid start_clu, but for clarity, initialize
hint_femp.eidx to zero.

Cc: stable@vger.kernel.org
Reported-by: syzbot+01218003be74b5e1213a@syzkaller.appspotmail.com
Tested-by: syzbot+01218003be74b5e1213a@syzkaller.appspotmail.com
Reviewed-by: Yuezhang Mo <Yuezhang.Mo@sony.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-12-14 19:54:00 +01:00

..

9p

fs/9p: fix uninitialized values during inode evict

2024-11-22 15:37:34 +01:00

adfs

…

affs

…

afs

afs: Fix missing subdir edit when renamed between parent dirs

2024-11-08 16:26:43 +01:00

autofs

autofs: fix memory leak of waitqueues in autofs_catatonic_mode

2023-09-23 11:10:59 +02:00

befs

…

bfs

…

btrfs

btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations

2024-12-14 19:53:56 +01:00

cachefiles

cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()

2024-12-14 19:53:15 +01:00

ceph

ceph: fix cap ref leak via netfs init_request

2024-10-17 15:22:02 +02:00

coda

…

configfs

…

cramfs

…

crypto

fs: Create a generic is_dot_dotdot() utility

2024-10-17 15:21:17 +02:00

debugfs

debugfs: fix automount d_fsdata usage

2024-01-20 11:50:04 +01:00

devpts

…

dlm

fs: dlm: don't put dlm_local_addrs on heap

2024-02-16 19:06:29 +01:00

ecryptfs

fs: Create a generic is_dot_dotdot() utility

2024-10-17 15:21:17 +02:00

efivarfs

efivarfs: Request at most 512 bytes for variable names

2024-03-06 14:45:11 +00:00

efs

…

erofs

erofs: fix incorrect symlink detection in fast symlink

2024-10-17 15:22:09 +02:00

exfat

exfat: fix uninit-value in __exfat_get_dentry_set

2024-12-14 19:54:00 +01:00

exportfs

exportfs: use pr_debug for unreachable debug statements

2024-03-06 14:45:15 +00:00

ext2

ext2: Verify bitmap and itable block numbers before using them

2024-08-03 08:49:32 +02:00

ext4

ext4: fix FS_IOC_GETFSMAP handling

2024-12-14 19:53:58 +01:00

f2fs

f2fs: fix to avoid forcing direct write to use buffered IO on inline_data inode

2024-12-14 19:53:45 +01:00

fat

fat: fix uninitialized variable

2024-10-22 15:56:43 +02:00

freevxfs

…

fscache

netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING

2024-12-14 19:53:15 +01:00

fuse

fuse: add feature flag for expire-only

2024-09-12 11:10:30 +02:00

gfs2

gfs2: Remove freeze_go_demote_ok

2024-08-29 17:30:56 +02:00

hfs

hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()

2024-08-03 08:49:32 +02:00

hfsplus

hfsplus: don't query the device logical block size multiple times

2024-12-14 19:53:16 +01:00

hostfs

…

hpfs

…

hugetlbfs

mm/hugetlb: add hugetlb_folio_subpool() helpers

2024-05-17 11:55:51 +02:00

iomap

iomap: turn iomap_want_unshare_iter into an inline function

2024-11-08 16:26:42 +01:00

isofs

isofs: handle CDs with bad root inode but good Joliet root directory

2024-04-13 13:05:06 +02:00

jbd2

jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit

2024-10-17 15:21:56 +02:00

jffs2

jffs2: Fix potential illegal address access in jffs2_free_inode

2024-07-11 12:47:09 +02:00

jfs

jfs: xattr: check invalid xattr size more strictly

2024-12-14 19:53:58 +01:00

kernfs

kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files

2024-08-29 17:30:35 +02:00

lockd

nfsd: stop setting ->pg_stats for unused stats

2024-08-19 06:00:04 +02:00

minix

…

netfs

netfs: Only call folio_start_fscache() one time for each folio

2023-10-06 14:56:32 +02:00

nfs

nfs: Fix KMSAN warning in decode_getfattr_attrs()

2024-11-14 13:15:16 +01:00

nfs_common

…

nfsd

NFSD: Fix nfsd4_shutdown_copy()

2024-12-14 19:53:48 +01:00

nilfs2

nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint

2024-11-22 15:37:31 +01:00

nls

fs/nls: make load_nls() take a const parameter

2023-09-13 09:42:22 +02:00

notify

fsnotify: fix sending inotify event with unexpected filename

2024-12-14 19:53:59 +01:00

ntfs

…

ntfs3

ntfs3: Add bounds checking to mi_enum_attr()

2024-12-14 19:53:54 +01:00

ocfs2

ocfs2: fix uninitialized value in ocfs2_file_read_iter()

2024-12-14 19:53:41 +01:00

omfs

…

openpromfs

openpromfs: finish conversion to the new mount API

2024-06-12 11:03:03 +02:00

orangefs

orangefs: fix out-of-bounds fsid access

2024-07-11 12:47:08 +02:00

overlayfs

ovl: remove upper umask handling from ovl_create_upper()

2024-06-12 11:03:39 +02:00

proc

fs/proc/kcore.c: fix coccinelle reported ERROR instances

2024-12-14 19:53:40 +01:00

pstore

pstore/zone: Add a null pointer check to the psz_kmsg_read

2024-04-13 13:04:57 +02:00

qnx4

…

qnx6

…

quota

quota: Remove BUG_ON from dqget()

2024-08-29 17:30:34 +02:00

ramfs

shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs

2023-07-19 16:22:11 +02:00

reiserfs

reiserfs: fix uninit-value in comp_keys

2024-08-29 17:30:20 +02:00

romfs

…

smb

smb: cached directories can be more than root file handle

2024-12-14 19:53:43 +01:00

squashfs

Squashfs: sanity check symbolic link size

2024-09-12 11:10:25 +02:00

sysfs

fs: sysfs: Fix reference leak in sysfs_break_active_protection()

2024-04-27 17:07:16 +02:00

sysv

sysv: don't call sb_bread() with pointers_lock held

2024-04-13 13:05:05 +02:00

tracefs

tracefs: Add missing lockdown check to tracefs_create_dir()

2023-09-23 11:11:12 +02:00

ubifs

ubifs: Set page uptodate in the correct place

2024-04-03 15:19:27 +02:00

udf

udf: fix uninit-value use in udf_get_fileshortad

2024-11-01 01:56:03 +01:00

ufs

…

unicode

unicode: Fix utf8_load() error path

2024-12-14 19:53:35 +01:00

vboxsf

vboxsf: Avoid an spurious warning if load_nls_xxx() fails

2024-04-10 16:28:25 +02:00

verity

fsverity: skip PKCS#7 parser when keyring is empty

2023-09-13 09:43:03 +02:00

xfs

xfs: add bounds checking to xlog_recover_process_data

2024-12-14 19:53:54 +01:00

zonefs

zonefs: Improve error handling

2024-02-23 09:12:45 +01:00

aio.c

fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion

2024-04-03 15:19:42 +02:00

anon_inodes.c

…

attr.c

attr: block mode changes of symlinks

2023-09-23 11:11:10 +02:00

bad_inode.c

…

binfmt_elf_fdpic.c

fs: binfmt_elf_efpic: don't use missing interpreter's properties

2024-08-29 17:30:35 +02:00

binfmt_elf_test.c

…

binfmt_elf.c

ELF: fix kernel.randomize_va_space double read

2024-09-12 11:10:19 +02:00

binfmt_flat.c

binfmt_flat: Fix corruption when not offsetting data start

2024-08-19 06:00:07 +02:00

binfmt_misc.c

binfmt_misc: cleanup on filesystem umount

2024-08-29 17:30:30 +02:00

binfmt_script.c

…

buffer.c

…

char_dev.c

…

compat_binfmt_elf.c

…

coredump.c

…

d_path.c

…

dax.c

fsdax: dax_unshare_iter needs to copy entire blocks

2024-11-08 16:26:42 +01:00

dcache.c

fs: better handle deep ancestor chains in is_subdir()

2024-07-25 09:49:18 +02:00

direct-io.c

…

drop_caches.c

…

eventfd.c

eventfd: prevent underflow for eventfd semaphores

2023-09-13 09:42:27 +02:00

eventpoll.c

epoll: be better about file lifetimes

2024-06-12 11:03:03 +02:00

exec.c

exec: don't WARN for racy path_noexec check

2024-11-01 01:56:02 +01:00

fcntl.c

fs: Fix file_set_fowner LSM hook inconsistencies

2024-10-17 15:21:23 +02:00

fhandle.c

do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak

2024-03-26 18:20:27 -04:00

file_table.c

…

file.c

close_range(): fix the logics in descriptor table trimming

2024-10-17 15:22:03 +02:00

filesystems.c

…

fs_context.c

vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing

2023-09-13 09:42:28 +02:00

fs_parser.c

…

fs_pin.c

…

fs_struct.c

…

fs_types.c

…

fs-writeback.c

writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs

2023-11-20 11:51:50 +01:00

fsopen.c

…

init.c

…

inode.c

fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name

2024-12-14 19:53:13 +01:00

internal.h

nfs: use vfs setgid helper

2023-08-30 16:11:10 +02:00

ioctl.c

lsm: new security_file_ioctl_compat() hook

2024-01-31 16:17:00 -08:00

Kconfig

smb: move client and server files to common directory fs/smb

2023-06-28 11:12:40 +02:00

Kconfig.binfmt

…

kernel_read_file.c

…

libfs.c

…

locks.c

filelock: Fix fcntl/close race recovery compat path

2024-07-27 11:32:19 +02:00

Makefile

smb: move client and server files to common directory fs/smb

2023-06-28 11:12:40 +02:00

mbcache.c

…

mount.h

…

mpage.c

…

namei.c

fs: Create a generic is_dot_dotdot() utility

2024-10-17 15:21:17 +02:00

namespace.c

mount: handle OOM on mnt_warn_timestamp_expiry

2024-10-17 15:20:37 +02:00

no-block.c

…

nsfs.c

…

open.c

openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)

2024-11-01 01:56:06 +01:00

pipe.c

fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()

2024-04-10 16:28:30 +02:00

pnode.c

…

pnode.h

…

posix_acl.c

…

proc_namespace.c

…

read_write.c

…

readdir.c

…

remap_range.c

…

select.c

fs/select: rework stack allocation hack for clang

2024-03-26 18:20:28 -04:00

seq_file.c

…

signalfd.c

…

splice.c

mm: merge folio_has_private()/filemap_release_folio() call pairs

2024-01-10 17:10:31 +01:00

stack.c

…

stat.c

…

statfs.c

…

super.c

fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT

2024-08-03 08:49:53 +02:00

sync.c

…

sysctls.c

…

timerfd.c

…

userfaultfd.c

Fix userfaultfd_api to return EINVAL as expected

2024-07-18 13:18:41 +02:00

utimes.c

…

xattr.c

…