Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix integer overflow while processing acregmax mount option
User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Details
- Affected product:
- AlmaLinux 9.2 ESU , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , TuxCare 9.6 ESU
- Affected packages:
- kernel @ 5.14.0 (+4 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 9 | Released |
53 kernels
|
| AlmaLinux 9.2 ESU | Planned | — |
| Amazon Linux 2023 | Released |
26 kernels
|
| Debian 12 | Will Not Fix | — |
| Oracle Linux 9 | Released |
59 kernels
|
| Proxmox VE 7 5.15 | Released |
47 kernels
|
| RHEL 10 | Will Not Fix | — |
| RHEL 9 | Released |
53 kernels
|
| Rocky Linux 9 | Released |
49 kernels
|
| Ubuntu 20.04 HWE AWS | Released |
57 kernels
|
| Ubuntu 20.04 HWE Azure | Released |
40 kernels
|
| Ubuntu 22.04 | Released |
75 kernels
|
| Ubuntu 22.04 AWS | Released |
66 kernels
|
| Ubuntu 22.04 Azure | Released |
62 kernels
|
| Ubuntu 24.04 | Released |
30 kernels
|
| Ubuntu 24.04 AWS | Planned | — |