CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid
In the Linux kernel, the following vulnerability has been resolved:
fs: Fix uninitialized value issue in fromkuid and fromkgid
ocfs2setattr() uses attr->iamode, attr->iauid and attr->iagid in a trace point even though ATTRMODE, ATTRUID and ATTRGID aren't set.
Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTRMODE, ATTRUID, ATTRGID are initialized, otherwise 0.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53101?
CVE-2024-53101 is classified as a moderate severity vulnerability in the Linux kernel due to issues with uninitialized values.
How do I fix CVE-2024-53101?
To fix CVE-2024-53101, update your Linux kernel to a version that includes the patches addressing this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-53101?
CVE-2024-53101 affects Linux kernel versions from 4.19.324 up to and including various 6.12 release candidates.
What are the potential impacts of CVE-2024-53101?
Exploitation of CVE-2024-53101 could lead to information disclosure or improper handling of user attributes in the Linux filesystem.
Is there a workaround for CVE-2024-53101 if I cannot immediately update?
Currently, there are no known workarounds for CVE-2024-53101; updating to a patched version is recommended.