NetSight
IP …
medium5.5

CVE-2024-53101

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_…

Impact

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_mode, attr->ia_uid and attr->ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.324
from 4.20 before 5.4.286
from 5.5 before 5.10.230
from 5.11 before 5.15.173
from 5.16 before 6.1.118
from 6.2 before 6.6.62

Weakness classification

CWE-908

References