hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linux Linux)

CVE-2023-54130
HIGH 7.8

At a glance

Source
NVD
EPSS
EPSS 0.17 % · percentile 6 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Deferred

Description

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling Commit 55d1cbbbb29e ("hfs/hfsplus: use WARN_ON for sanity check") fixed a build warning by turning a comment into a WARN_ON(), but it turns out that syzbot then complains because it can trigger said warning with a corrupted hfs image. The warning actually does warn about a bad situation, but we are much better off just handling it as the error it is. So rather than warn about us doing bad things, stop doing the bad things and return -EIO. While at it, also fix a memory leak that was introduced by an earlier fix for a similar syzbot warning situation, and add a check for one case that historically wasn't handled at all (ie neither comment nor subsequent WARN_ON).

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected c886c10a6eddb99923b315f42bf63f448883ef9a < cc2164ada548addfa8ee215196661c3afe0c5154 ; affected 2344f17c0a89c181ab1a9fef57fd8c3bddfd6e30 < 82725be426bce0a425cc5e26fbad61ffd29cff03 ; affected 90103ccb6e60aa4efe48993d23d6a528472f2233 < da23752d9660ba7a8ca6c5768fd8776f67f59ee7 ; affected 4fd3a11804c8877ff11fec59c5c53f1635331e3e < be01f35efa876eb81cebab2cb0add068b7280ef4 ; affected 48d9e2e6de01ed35e965eb549758a837c07b601d < f10defb0be6ac42fb6a97b45920d32da6bd6fde8 ; affected 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb < 90e019006644dad35862cb4aa270f561b0732066
Linux · Linuxaffected 5.16 ; unaffected 0 < 5.16 ; unaffected 6.0.19 ≤ 6.0.* ; unaffected 6.1.5 ≤ 6.1.* ; unaffected 6.2 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD