In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
xfs: validate attr entry pointer before field access<\/p>\n
xfs_attr3_leaf_verify_entry() accesses lentry\/rentry fields (namelen,
\nvaluelen) before checking if the entry pointer itself is within bounds.
\nIf nameidx is crafted to point near the end of the buffer, these field
\naccesses can read out-of-bounds before the bounds check at
\nname_end > buf_end is performed.<\/p>\n
Add explicit bounds checks for entry pointers before accessing their
\nfields. Use offsetof() to check that the start of the flexible array
\nmember (nameval\/name) is within bounds, which ensures all preceding
\nfields are safe to access.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
xfs: validate attr entry pointer before field access<\/p>\n
xfs_attr3_leaf_verify_entry() accesses lentry\/rentry fields (namelen,
\nvaluele<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-17309","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/17309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=17309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=17309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=17309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}