CVE-2024-53234

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the handling of NONHEAD !delta[1] lclusters in the erofs filesystem. The issue was reported by syzbot, which found a WARNING in iomap iter done. Generally, NONHEAD lclusters won't have delta[1]==0, except for crafted images and filesystems created by pre-1.0 mkfs versions. The vulnerability led to inadequate decompressed lengths, impacting FIEMAP. The fix treats delta[1]==0 as delta[1]==1 to work around these legacy mkfs versions. Additionally, lclusterbits > 14 is considered illegal for compact indexes and will result in an error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.