Linux Kernel ocfs2 xattr strict bound check fix in ocfs2_xattr_find_entry

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - The vulnerability is described as "ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()". - It occurs in the function, located in the file. 2. Impact: - The vulnerability may affect the ocfs2 filesystem, particularly when xattrs in ocfs2 could be "non-indexed". - It could lead to out-of-bounds memory access, especially when memory requests exceed the valid boundary. 3. Fix: - The fix involves adding a strict boundary check before calling . - The patch has been submitted to the Linux kernel and has undergone review by multiple developers. 4. Commit Information: - Submitted by Ferry Meng on May 20, 2024. - Submitted by Greg Kroah-Hartman on November 8, 2024. - The commit includes a patch that resolves the boundary check issue in the function. 5. Related Links: - Upstream commit link: https://lkml.kernel.org/r/20240520082402.1976129-2-joseph.qi@linux.alibaba.com - GitHub commit link: https://github.com/torvalds/linux/commit/e2b3d7a9019d41a0da6c3ea64a1ff79c99c090 6. Review and Sign-offs: - The patch has been reviewed and signed off by multiple developers, including Joseph Qi, Lei Lu, Joel Becker, Jun Piao, Junxiao Bi, Mark Fasheh, Andrew Morton, and Sasha Levin. With this information, we gain a comprehensive understanding of the vulnerability, including its impact, the applied fix, and the review process.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel ocfs2 xattr strict bound check fix in ocfs2_xattr_find_entry