Skip to content
Heist/ feed
Unrated

tomoyo: don't emit warning in tomoyo_write_control()

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyo_write_control() syzbot is reporting too large allocation warning at tomoyo_write_control(), for one can write a very very long line without new line character. To fix this warning, I use __GFP_NOWARN rather than checking for KMALLOC_MAX_SIZE, for practically a valid line should be always shorter than 32KB where the "too small to fail" memory-allocation rule applies. One might try to write a valid line that is longer than 32KB, but such request will likely fail with -ENOMEM. Therefore, I feel that separately returning -EINVAL when a line is longer than KMALLOC_MAX_SIZE is redundant. There is no need to distinguish over-32KB and over-KMALLOC_MAX_SIZE.

Announced Source revision 1
Original source ↗

CVE-2024-58085

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-58085

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "c67efabddc73171c7771d3ffe4ffa1e503ee533e",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "f6b37b3e12de638753bce79a2858070b9c4a4ad3",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "b2bd5857a0d6973ebbcb4d9831ddcaebbd257be1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "a01c200fa7eb59da4d2dbbb48b61f4a0d196c09f",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "fe1c021eb03dae0dc9dce55e81f77a60e419a27a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "c9382f380e8d09209b8e5c0def0545852168be25",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "414705c0303350d139b1dc18f329fe47dfb642dd",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "bd03a3e4c9a9df0c6b007045fa7fc8889111a478",
        "lessThan": "3df7546fc03b8f004eee0b9e3256369f7d096685",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "security/tomoyo/common.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.1"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "3.1",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.4.291",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.235",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.179",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.129",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.78",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.14",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.13.3",
        "versionType": "semver",
        "lessThanOrEqual": "6.13.*"
      },
      {
        "status": "unaffected",
        "version": "6.14",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "security/tomoyo/common.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-58085

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26878 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement