https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 19:33:13 +0000 https://vulnerability.circl.lu/vuln/cve-2024-46688 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails</p> <p>If z_erofs_gbuf_growsize() partially fails on a global buffer due to memory allocation failure or fault injection (as reported by syzbot [1]), new pages need to be freed by comparing to the existing pages to avoid memory leaks.</p> <p>However, the old gbuf-&gt;pages[] array may not be large enough, which can lead to null-ptr-deref or out-of-bound access.</p> <p>Fix this by checking against gbuf-&gt;nrpages in advance.</p> <p>[1] https://lore.kernel.org/r/000000000000f7b96e062018c6e3@google.com</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails</p> <p>If z_erofs_gbuf_growsize() partially fails on a global buffer due to memory allocation failure or fault injection (as reported by syzbot [1]), new pages need to be freed by comparing to the existing pages to avoid memory leaks.</p> <p>However, the old gbuf-&gt;pages[] array may not be large enough, which can lead to null-ptr-deref or out-of-bound access.</p> <p>Fix this by checking against gbuf-&gt;nrpages in advance.</p> <p>[1] https://lore.kernel.org/r/000000000000f7b96e062018c6e3@google.com</p> https://vulnerability.circl.lu/vuln/cve-2024-46688