Linux Kernel ocfs2 out-of-bounds access fix in xattr_find_entry

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - Title: ocfs2: add bounds checking to ocfs2_xattr_find_entry() - Description: Adds a paranoia check to ensure ocfs2 xattr entries do not extend beyond valid memory regions, preventing out-of-bounds access during scan matching. 2. Patch Source: - Upstream commit: 9e3041fecd8f78a5900c3aa51d3d756e73264d6 - Patch Author: Ferry Meng - Patch Submission Time: 2024-05-20 10:40:23 +0800 3. Patch Status: - Status: Merged - Merge Time: 2024-11-08 16:20:26 +0100 4. Patch Content: - File: fs/ocfs2/xattr.c - Changes: - Added bounds checking to the function to ensure it does not access memory beyond valid regions. 5. Patch Dependencies: - Stable dep-of: af77c4fc1871 ("ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()") 6. Patch Review: - Reviewer: Joseph Qi - Reporter: lei lu - Other Reviewers: Mark Fasheh , Joel Becker , Junxiao Bi , Changwei Ge , Gang He , Jun Piao , Andrew Morton , Sasha Levin 7. Patch Link: - Link: https://lkml.kernel.org/r/20240520024024.1976129-1-joseph.qi@linux.alibaba.com This information helps us understand the background, purpose, review process, and current status of the patch within the codebase.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel ocfs2 out-of-bounds access fix in xattr_find_entry