296,213
Total vulnerabilities in the database
In the Linux kernel, the following vulnerability has been resolved:
squashfs: harden sanity check in squashfs_read_xattr_id_table
While mounting a corrupted filesystem, a signed integer '*xattr_ids' can become less than zero. This leads to the incorrect computation of 'len' and 'indexes' values which can cause null-ptr-deref in copy_bio_to_actor() or out-of-bounds accesses in the next sanity checks inside squashfs_read_xattr_id_table().
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 4.4.258 | 4.5 |
| linux / linux_kernel | 4.9.258 | 4.10 |
| linux / linux_kernel | 4.14.222 | 4.15 |
| linux / linux_kernel | 4.19.176 | 4.20 |
| linux / linux_kernel | 5.10.16 | 5.10.16.x |
| linux / linux_kernel | 5.4.98 | 5.5 |