In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix uninitialized pointer free on read_alloc_one_name() error
The function read_alloc_one_name() does not initialize the name field of
the passed fscrypt_str struct if kmalloc fails to allocate the
corresponding buffer. Thus, it is not guaranteed that
fscrypt_str.name is initialized when freeing it.
This is a follow-up to the linked patch that fixes the remaining
instances of the bug introduced by commit e43eec81c516 ("btrfs: use
struct qstr instead of name and namelen pairs").
References
Configurations
Configuration 1 (hide)
|
History
30 Oct 2024, 14:40
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-824 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Linux
Linux linux Kernel |
|
| CPE | cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* |
|
| References | () https://git.kernel.org/stable/c/1ec28de5e476913ae51f909660b4447eddb28838 - Patch | |
| References | () https://git.kernel.org/stable/c/2ab5e243c2266c841e0f6904fad1514b18eaf510 - Patch | |
| References | () https://git.kernel.org/stable/c/7fc7c47b9ba0cf2d192f2117a64b24881b0b577f - Patch | |
| References | () https://git.kernel.org/stable/c/b37de9491f140a0ff125c27dd1050185c3accbc1 - Patch |
29 Oct 2024, 14:34
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
29 Oct 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-29 01:15
Updated : 2024-10-30 14:40
NVD link : CVE-2024-50087
Mitre link : CVE-2024-50087
CVE.ORG link : CVE-2024-50087
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-824
Access of Uninitialized Pointer