CVE - CVE-2024-50143

CVE-ID
CVE-2024-50143	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad Check for overflow when computing alen in udf_current_aext to mitigate later uninit-value use in udf_get_fileshortad KMSAN bug[1]. After applying the patch reproducer did not trigger any issue[2]. [1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df [2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1ac49babc952f48d82676979b20885e480e69be8 URL:https://git.kernel.org/stable/c/1ac49babc952f48d82676979b20885e480e69be8 MISC:https://git.kernel.org/stable/c/264db9d666ad9a35075cc9ed9ec09d021580fbb1 URL:https://git.kernel.org/stable/c/264db9d666ad9a35075cc9ed9ec09d021580fbb1 MISC:https://git.kernel.org/stable/c/4fc0d8660e391dcd8dde23c44d702be1f6846c61 URL:https://git.kernel.org/stable/c/4fc0d8660e391dcd8dde23c44d702be1f6846c61 MISC:https://git.kernel.org/stable/c/72e445df65a0aa9066c6fe2b8736ba2fcca6dac7 URL:https://git.kernel.org/stable/c/72e445df65a0aa9066c6fe2b8736ba2fcca6dac7 MISC:https://git.kernel.org/stable/c/e52e0b92ed31dc62afbda15c243dcee0bb5bb58d URL:https://git.kernel.org/stable/c/e52e0b92ed31dc62afbda15c243dcee0bb5bb58d
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)