https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 09:27:35 +0000 https://vulnerability.circl.lu/vuln/cve-2024-49900 <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>jfs: Fix uninit-value access of new_ea in ea_buffer</p> <p>syzbot reports that lzo1x_1_do_compress is using uninit-value:</p> <p>===================================================== BUG: KMSAN: uninit-value in lzo1x_1_do_compress+0x19f9/0x2510 lib/lzo/lzo1x_compress.c:178</p> <p>...</p> <p>Uninit was stored to memory at: ea_put fs/jfs/xattr.c:639 [inline]</p> <p>...</p> <p>Local variable ea_buf created at: __jfs_setxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662 __jfs_xattr_set+0xe6/0x1f0 fs/jfs/xattr.c:934</p> <p>=====================================================</p> <p>The reason is ea_buf-&gt;new_ea is not initialized properly.</p> <p>Fix this by using memset to empty its content at the beginning in ea_get().</p> <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>jfs: Fix uninit-value access of new_ea in ea_buffer</p> <p>syzbot reports that lzo1x_1_do_compress is using uninit-value:</p> <p>===================================================== BUG: KMSAN: uninit-value in lzo1x_1_do_compress+0x19f9/0x2510 lib/lzo/lzo1x_compress.c:178</p> <p>...</p> <p>Uninit was stored to memory at: ea_put fs/jfs/xattr.c:639 [inline]</p> <p>...</p> <p>Local variable ea_buf created at: __jfs_setxattr+0x5d/0x1ae0 fs/jfs/xattr.c:662 __jfs_xattr_set+0xe6/0x1f0 fs/jfs/xattr.c:934</p> <p>=====================================================</p> <p>The reason is ea_buf-&gt;new_ea is not initialized properly.</p> <p>Fix this by using memset to empty its content at the beginning in ea_get().</p> https://vulnerability.circl.lu/vuln/cve-2024-49900