CVE-2024-50143

udf: fix uninit-value use in udf_get_fileshortad

State: Published
Severity: 7.8 High
Published: Nov 7, 2024
Updated: Aug 5, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

udf: fix uninit-value use in udf_get_fileshortad

Check for overflow when computing alen in udf_current_aext to mitigate later uninit-value use in udf_get_fileshortad KMSAN bug[1]. After applying the patch reproducer did not trigger any issue[2].

[1] https://syzkaller.appspot.com/bug?extid=8901c4560b7ab5c2f9df [2] https://syzkaller.appspot.com/x/log.txt?x=10242227980000

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-908 Use of Uninitialized Resource

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5eb76fb98b3335aa5cca6a7db2e659561c79c32bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 417bd613bdbe791549f7687bb1b9b8012ff111c2Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0ce61b1f6b32df822b59c680cbe8e5ba5d335742Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4fc0d8660e391dcd8dde23c44d702be1f6846c61Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 72e445df65a0aa9066c6fe2b8736ba2fcca6dac7Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ac49babc952f48d82676979b20885e480e69be8Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e52e0b92ed31dc62afbda15c243dcee0bb5bb58dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 264db9d666ad9a35075cc9ed9ec09d021580fbb1Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.246 through 5.10.Not affected 5.15.170 through 5.15.Not affected 6.1.115 through 6.1.Not affected 6.6.59 through 6.6.Not affected 6.11.6 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5eb76fb98b3335aa5cca6a7db2e659561c79c32bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 417bd613bdbe791549f7687bb1b9b8012ff111c2Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0ce61b1f6b32df822b59c680cbe8e5ba5d335742Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4fc0d8660e391dcd8dde23c44d702be1f6846c61Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 72e445df65a0aa9066c6fe2b8736ba2fcca6dac7Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ac49babc952f48d82676979b20885e480e69be8Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e52e0b92ed31dc62afbda15c243dcee0bb5bb58dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 264db9d666ad9a35075cc9ed9ec09d021580fbb1Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.246 through 5.10.*Not affected
5.15.170 through 5.15.*Not affected
6.1.115 through 6.1.*Not affected
6.6.59 through 6.6.*Not affected
6.11.6 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.