CVE-2022-49846

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

udf: Fix a slab-out-of-bounds write bug in udf_find_entry()

Syzbot reported a slab-out-of-bounds Write bug:

loop0: detected capacity change from 0 to 2048

==================================================================

BUG: KASAN: slab-out-of-bounds in udf_find_entry+0x8a5/0x14f0

fs/udf/namei.c:253

Write of size 105 at addr ffff8880123ff896 by task syz-executor323/3610

CPU: 0 PID: 3610 Comm: syz-executor323 Not tainted

6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0

Hardware name: Google Compute Engine/Google Compute Engine, BIOS

Google 10/11/2022

Call Trace:

<TASK>

__dump_stack lib/dump_stack.c:88 [inline]

dump_stack_lvl+0x1b1/0x28e lib/dump_stack.c:106

print_address_description+0x74/0x340 mm/kasan/report.c:284

print_report+0x107/0x1f0 mm/kasan/report.c:395

kasan_report+0xcd/0x100 mm/kasan/report.c:495

kasan_check_range+0x2a7/0x2e0 mm/kasan/generic.c:189

memcpy+0x3c/0x60 mm/kasan/shadow.c:66

udf_find_entry+

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References