Nixpkgs security tracker

Try the new UI
Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
created 1 week, 4 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion
eventfs: Initialize ei->children and ei->list in init_ei()

In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei->children and ei->list in init_ei() eventfs_create_dir() allocates the eventfs_inode and initializes it with init_ei(). But this does not initialize the eventfs_inode list_heads. If the eventfs_create_dir() fails due to memory pressure, it will call free_ei() before it initialized the lists, and that checks to make sure the eventfs_inode has no children. But because the list wasn't initialized, it will give a false warning. Fix it by moving the list initialization into init_ei(). [ Rewrote change log ]

Affected products

Linux
  • ==35ee34c0f6d578c9d245438ca29bf2e7024a5a65
  • ==6.7
  • =<*
  • <c480f8af173d5b19c6d9c4311df6bbe352face9e
  • <6.7
  • <76e0f85f650738d768449dbccbc7c55d05f5b609
  • =<7.2.*
  • <5333e18e6b425fcc39c7fea89e3949a2a98bc5e4
  • <6.7
  • =<6.18.*
  • =<6.12.*
  • <1704aaaf5d22bc765c168402350d191e24e245bc