Vulnerability in ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
Summary
GSD-2022-1002328: ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock(). Affects Kernel versions >= 1e51764a3c2ac05a23a22b2a95ddee4d9bffb16d, < 5343575aa11c5d7044107d59d43f84aec01312b0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ubifs package is a file system designed for use on flash devices. It is part of the Linux Kernel ecosystem and has been present since version 2.6.27. The package provides a reliable and efficient file system for flash storage, ensuring data integrity and minimizing wear on the flash memory. However, a vulnerability has been discovered in the ubifs_wbuf_write_nolock() function, which can lead to a read out-of-bounds issue.
Vulnerability Detail
The vulnerability in the ubifs_wbuf_write_nolock() function allows an attacker to read out-of-bounds memory, potentially leading to information disclosure or a system crash. This vulnerability was introduced in version 2.6.27 of the Linux Kernel and has been present until version 4.19.238. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in version 4.19.238 of the Linux Kernel by commit 5343575aa11c5d7044107d59d43f84aec01312b0.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the Linux Kernel to the fixed version.
Conclusion
In conclusion, the ubifs package in the Linux Kernel is vulnerable to a read out-of-bounds issue in the ubifs_wbuf_write_nolock() function. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version 4.19.238 or later. If you need further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ubifs is a file system designed for use on flash devices. It provides a reliable and efficient file system for flash storage, minimizing wear on the flash memory.
The vulnerability allows an attacker to read out-of-bounds memory, potentially leading to information disclosure or a system crash.
To fix this vulnerability, update the Linux Kernel to version 4.19.238 or later.
No, there is no known workaround for this vulnerability. Updating the Linux Kernel is the recommended solution.
You can find more information about this vulnerability in the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
