Read Out-of-Bounds Vulnerability in ubifs
Summary
GSD-2022-1002033: ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock(). Affects Kernel versions >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < 07a209fadee7b53b46858538e1177597273862e4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ubifs package is a file system designed for use on flash devices. It is a part of the Linux Kernel ecosystem. The package provides a reliable and efficient file system for flash storage, offering features such as compression and wear-leveling. However, a vulnerability has been discovered in the ubifs_wbuf_write_nolock() function, which can lead to read out-of-bounds access.
Vulnerability Detail
The vulnerability in ubifs arises from a read out-of-bounds access in the ubifs_wbuf_write_nolock() function. This issue was introduced in version v2.6.27 of the Linux Kernel by commit 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d. It was fixed in version v5.10.110 by commit 07a209fadee7b53b46858538e1177597273862e4. An attacker could potentially exploit this vulnerability to read sensitive information from kernel memory, leading to a compromise of system integrity and confidentiality.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the ubifs package in the Linux Kernel is vulnerable to a read out-of-bounds issue in the ubifs_wbuf_write_nolock() function. This vulnerability can be fixed by updating the Linux Kernel to version v5.10.110 or later. No workaround is available for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ubifs is a file system designed for use on flash devices. It provides a reliable and efficient file system for flash storage, offering features such as compression and wear-leveling.
The vulnerability allows for read out-of-bounds access, which can lead to the compromise of system integrity and confidentiality.
To fix this vulnerability, update the Linux Kernel to version v5.10.110 or later.
No workaround has been provided for this vulnerability.
You can find more information about this vulnerability in the GSD-2022-1002033 JSON report: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002033.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
