dm flakey: fix a crash with invalid table line (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 14 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: dm flakey: fix a crash with invalid table line This command will crash with NULL pointer dereference: dmsetup create flakey --table \ "0 `blockdev --getsize /dev/ram0` flakey /dev/ram0 0 0 1 2 corrupt_bio_byte 512" Fix the crash by checking if arg_name is non-NULL before comparing it.
Références
- https://git.kernel.org/stable/c/f95cb1526669ccdf7eb12eefd57a893953e3595f
- https://git.kernel.org/stable/c/12849ed107c0b2869fb775c81208050899006f07
- https://git.kernel.org/stable/c/337b7af273562b73c46ef77a724604ad139ca762
- https://git.kernel.org/stable/c/a1e3fffe02e05c05357af91364ac0fc1ed425b5b
- https://git.kernel.org/stable/c/f76fcb9d43ec014ac4a1bb983768696d5b032df9
- https://git.kernel.org/stable/c/cb874a190f3f7c3c3fa5b979bee7a3b8cc3a19cc
- https://git.kernel.org/stable/c/83b4e3d878ea6be9aec1d5a1ab177c766c64d1a0
- https://git.kernel.org/stable/c/8258d84a7917aeece773716518deadb7ad776cb7
- https://git.kernel.org/stable/c/98dba02d9a93eec11bffbb93c7c51624290702d2
Références européennes
- ENISA EUVD · EUVD-2023-60120
- GCVE · GCVE-0-2023-53786
Avis du CERT-FR
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected a3998799fb4df0b0af8271a7d50c4269032397aa < f95cb1526669ccdf7eb12eefd57a893953e3595f ; affected a3998799fb4df0b0af8271a7d50c4269032397aa < 12849ed107c0b2869fb775c81208050899006f07 ; affected a3998799fb4df0b0af8271a7d50c4269032397aa < 337b7af273562b73c46ef77a724604ad139ca762 ; affected a3998799fb4df0b0af8271a7d50c4269032397aa < a1e3fffe02e05c05357af91364ac0fc1ed425b5b ; affected a3998799fb4df0b0af8271a7d50c4269032397aa < f76fcb9d43ec014ac4a1bb983768696d5b032df9 ; affected a3998799fb4df0b0af8271a7d50c4269032397aa < cb874a190f3f7c3c3fa5b979bee7a3b8cc3a19cc |
| Linux · Linux | affected 3.1 ; unaffected 0 < 3.1 ; unaffected 4.14.315 ≤ 4.14.* ; unaffected 4.19.283 ≤ 4.19.* ; unaffected 5.4.243 ≤ 5.4.* ; unaffected 5.10.180 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |