CVE-2024-50143

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61

Description: The issue concerns an uninit-value use in udf get fileshortad and a potential overflow when computing alen in udf current aext. This could lead to later uninit-value use in udf get fileshortad, identified as a KMSAN bug. After applying the patch, the reproducer did not trigger any issues.

Recommendations: For Linux kernel versions prior to 6.6.61, update to version 6.6.61 or later to resolve the issue. As a temporary workaround, consider restricting access to the udf get fileshortad function and the udf current aext computation until a patch is available. Avoid using the alen variable in the affected udf current aext computation until the issue is resolved.