CVE-2024-41059

hfsplus: fix uninit-value in copy_name

State: Published
Severity: 7.8 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hfsplus: fix uninit-value in copy_name

[syzbot reported] BUG: KMSAN: uninit-value in sized_strscpy+0xc4/0x160 sized_strscpy+0xc4/0x160 copy_name+0x2af/0x320 fs/hfsplus/xattr.c:411 hfsplus_listxattr+0x11e9/0x1a50 fs/hfsplus/xattr.c:750 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Uninit was created at: slab_post_alloc_hook mm/slub.c:3877 [inline] slab_alloc_node mm/slub.c:3918 [inline] kmalloc_trace+0x57b/0xbe0 mm/slub.c:4065 kmalloc include/linux/slab.h:628 [inline] hfsplus_listxattr+0x4cc/0x1a50 fs/hfsplus/xattr.c:699 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f [Fix] When allocating memory to strbuf, initialize memory to 0.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	017f8da43e92ddd9989884720b694a512e09ccce to before 72805debec8f7aa342da194fe0ed7bc8febea335Affected 017f8da43e92ddd9989884720b694a512e09ccce to before c733e24a61cbcff10f660041d6d84d32bb7e4cb4Affected 017f8da43e92ddd9989884720b694a512e09ccce to before 34f8efd2743f2d961e92e8e994de4c7a2f9e74a0Affected 017f8da43e92ddd9989884720b694a512e09ccce to before d02d8c1dacafb28930c39e16d48e40bb6e4cbc70Affected 017f8da43e92ddd9989884720b694a512e09ccce to before 22999936b91ba545ce1fbbecae6895127945e91cAffected 017f8da43e92ddd9989884720b694a512e09ccce to before f08956d8e0f80fd0d4ad84ec917302bb2f3a9c6aAffected 017f8da43e92ddd9989884720b694a512e09ccce to before ad57dc2caf1e0a3c0a9904400fae7afbc9f74bb2Affected 017f8da43e92ddd9989884720b694a512e09ccce to before 0570730c16307a72f8241df12363f76600baf57dAffected
LinuxLinux	3.16Affected before 3.16Not affected 4.19.319 through 4.19.Not affected 5.4.281 through 5.4.Not affected 5.10.223 through 5.10.Not affected 5.15.164 through 5.15.Not affected 6.1.101 through 6.1.Not affected 6.6.42 through 6.6.Not affected 6.9.11 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

017f8da43e92ddd9989884720b694a512e09ccce to before 72805debec8f7aa342da194fe0ed7bc8febea335Affected
017f8da43e92ddd9989884720b694a512e09ccce to before c733e24a61cbcff10f660041d6d84d32bb7e4cb4Affected
017f8da43e92ddd9989884720b694a512e09ccce to before 34f8efd2743f2d961e92e8e994de4c7a2f9e74a0Affected
017f8da43e92ddd9989884720b694a512e09ccce to before d02d8c1dacafb28930c39e16d48e40bb6e4cbc70Affected
017f8da43e92ddd9989884720b694a512e09ccce to before 22999936b91ba545ce1fbbecae6895127945e91cAffected
017f8da43e92ddd9989884720b694a512e09ccce to before f08956d8e0f80fd0d4ad84ec917302bb2f3a9c6aAffected
017f8da43e92ddd9989884720b694a512e09ccce to before ad57dc2caf1e0a3c0a9904400fae7afbc9f74bb2Affected
017f8da43e92ddd9989884720b694a512e09ccce to before 0570730c16307a72f8241df12363f76600baf57dAffected

LinuxLinux

3.16Affected
before 3.16Not affected
4.19.319 through 4.19.*Not affected
5.4.281 through 5.4.*Not affected
5.10.223 through 5.10.*Not affected
5.15.164 through 5.15.*Not affected
6.1.101 through 6.1.*Not affected
6.6.42 through 6.6.*Not affected
6.9.11 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.