CVE-2023-53796

Summary

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix information leak in f2fs_move_inline_dirents()

When converting an inline directory to a regular one, f2fs is leaking uninitialized memory to disk because it doesn't initialize the entire directory block. Fix this by zero-initializing the block.

This bug was introduced by commit 4ec17d688d74 ("f2fs: avoid unneeded initializing when converting inline dentry"), which didn't consider the security implications of leaking uninitialized memory to disk.

This was found by running xfstest generic/435 on a KMSAN-enabled kernel.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < 4e3b4b170bd43db1d8a93a6bd0ea434b17cc86f7affected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < a6807ef0f3b3d8508d3b07a2e35de8a91820a014affected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < 2bef8314fcf94ddc27e22d03f237c0fafd00de33affected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < 00b5587326625d0fddb2a5f5a3d4acd950102aceaffected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < 117d4f6687b1f74423b5d398ea95c63b262a8e73affected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < f07a8d61b6ea81bb3cbe0638af40f8824d6147fdaffected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < eebaecef0095bb8f493c03982da75c6e7bae1056affected
LinuxLinux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca < 9a5571cff4ffcfc24847df9fd545cc5799ac0ee5affected
LinuxLinux4.3affected
LinuxLinux0 < 4.3unaffected
LinuxLinux4.14.308 <= 4.14.*unaffected
LinuxLinux4.19.276 <= 4.19.*unaffected
LinuxLinux5.4.235 <= 5.4.*unaffected
LinuxLinux5.10.173 <= 5.10.*unaffected
LinuxLinux5.15.99 <= 5.15.*unaffected
LinuxLinux6.1.16 <= 6.1.*unaffected
LinuxLinux6.2.3 <= 6.2.*unaffected
LinuxLinux6.3 <= *unaffected

Weaknesses

References