Security tracker / CVE-2024-46701

CVE-2024-46701

libfs: fix infinite directory reads for offset dir

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in a2e459555c5f ("shmem: stable directory offsets"). Vulnerable
 carnil> versions: 6.6-rc1.

Bugs

Status

Branch	Status
upstream	released (6.11-rc4) [64a7ce76fb901bf9f9c36cf5d681328fc0fd4b5a]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.10-upstream-stable	released (6.10.7) [308b4fc2403b335894592ee9dc212a5e58bb309f]
6.6-upstream-stable	needed
6.1-upstream-stable	N/A "Vulnerable code not present"
5.10-upstream-stable	N/A "Vulnerable code not present"
4.19-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.10.7-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"